Cross-Site Scripting Vulnerability in Greenshift WordPress Plugin
CVE-2026-83544
Currently unrated
Key Information:
- Vendor
WordPress
- Status
- Vendor
- CVE Published:
- 5 September 2026
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-83544?
The Greenshift plugin for WordPress prior to version 13.2.0 contains a vulnerability that arises from inadequate escaping of block animation attributes output within HTML. This flaw allows users with contributor-level access or higher to inject arbitrary web scripts into the content, which get executed when the affected content is viewed. This creates a serious security risk as it can be exploited for malicious purposes, including unauthorized data access and user session hijacking.
Affected Version(s)
Greenshift 0 < 13.2.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.