What the vulnerability does
01Description
The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the gspb_make_proxy_api_request() function in versions 11.4 to 11.4.5. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. The arbitrary file upload was sufficiently patched in 11.4.5, but a capability check was added in 11.4.6 to properly prevent unauthorized limited file uploads.
Explanation of Vulnerability in Simple Terms
02Summary
Greenshift versions 11.4 through 11.4.5 allow authenticated users to upload files without proper validation. An attacker with low-level site access can upload malicious files, potentially gaining control of the site. Update to a version newer than 11.4.5 immediately.
What an attacker can do
03Attacker Capabilities
Upload malicious files to the site and execute code on the server.
Potential impact on your site
04Site Impact
Attackers with basic site access can compromise your entire WordPress installation and steal or modify all data.
Conditions required to exploit
05Prerequisites
Attacker must have a low-privilege user account on the site (e.g., contributor or subscriber role).
Key dates
06Disclosure timeline
April 22, 2025
CVE published
April 22, 2025
Record updated
