Sensitive Information Exposure in Greenshift Animation and Page Builder Blocks for WordPress

CVE-2026-120520

What is CVE-2026-120520?

The Greenshift Animation and Page Builder Blocks plugin for WordPress is susceptible to a vulnerability that permits unauthorized individuals to access sensitive user data. Specifically, an unauthenticated attacker can exploit the plugin to extract authenticated users' HttpOnly session cookies by injecting malicious GET parameters into the plugin's functionality. This vulnerability necessitates that a site administrator has set up a public GreenShift Element image block configured in a manner that includes a dynamic {{GET:key}} placeholder. If a logged-in user is tricked into navigating to a specially crafted link, their session cookie may be transmitted to an attacker-controlled server as part of an image source URL. It is crucial for users of this plugin to ensure appropriate security measures are in place to mitigate this risk.

References