Greenshift Plugin Vulnerable to Information Exposure

CVE-2024-11181

Summary

The Greenshift animation and page builder blocks plugin for WordPress is affected by an information exposure vulnerability that allows authenticated attackers, holding Contributor-level access or higher, to access restricted content. Specifically, the 'wp_reusable_render' shortcode lacks proper restrictions on the posts it can render, enabling these attackers to extract sensitive data from password-protected, private, or draft posts that should remain inaccessible. This oversight highlights the importance of reviewing user permissions and reinforcing access control measures to mitigate potential data leakage.

References