CVE-2026-107629
Received Received - Intake

Stored DOM-Based XSS in Greenshift WordPress Plugin

Publication date: 2026-10-29

Last updated on: 2026-10-29

Assigner: Wordfence

Description
The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 13.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires the affected post page to include an Advanced HTML Element block with Split Text animation enabled wrapping a Latest Comments block that displays comment excerpts, as this configuration causes splittext.js to be enqueued and to process the comment content container.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-29
Last Modified
2026-10-29
Generated
2026-10-29
AI Q&A
2026-10-29
EPSS Evaluated
N/A
NVD
CVE-2026-107629
EUVD
EUVD-2026-112685

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
wpsoul Greenshift – animation and page builder blocks 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-79 The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Stored DOM-Based Cross-Site Scripting (XSS) vulnerability in the Greenshift plugin for WordPress. It occurs due to insufficient input sanitization and output escaping in the 'comment' parameter. Attackers can inject malicious scripts into pages that execute when users access them. Exploitation requires a specific page configuration with Advanced HTML Element and Latest Comments blocks.

Detection Guidance

Check for the Greenshift plugin versions up to 13.2.1. Inspect WordPress pages with Advanced HTML Element blocks and Split Text animation enabled wrapping Latest Comments blocks. Look for malicious scripts in comment excerpts.

Impact Analysis

Unauthenticated attackers could inject malicious scripts into your website. When users visit affected pages, these scripts could steal cookies, session tokens, or other sensitive data. Attackers might also perform actions on behalf of users or deface your site.

Compliance Impact

This vulnerability could lead to unauthorized data access or modification, violating GDPR's integrity and confidentiality principles. For HIPAA, it may risk protected health information exposure. Both standards require protecting user data, which this vulnerability undermines.

Mitigation Strategies

Update the Greenshift plugin to the latest version beyond 13.2.1. Remove or disable the Advanced HTML Element block with Split Text animation if not needed. Review and sanitize all comments on affected pages.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-107629. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart