Back to the CVE list

CVE-2026-107627

Greenshift <= 13.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Nested Latest Comments Block

CVSS score

5.4

EPSS probability

—

Risk score

0.5

Published

3 h ago

Overview Public Exploits (0)Newsroom Vulnerability Timeline

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

No verified news item has been matched to this CVE yet.

Similar Vulnerabilities

5.4

CVE-2026-107629Greenshift <= 13.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via Comment Content via Split Text innerText

Vendorwpsoul ProductGreenshift – animation and page builder blocks

Patch status unknown3 h ago

6.4

CVE-2026-5092Greenshift <= 12.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data URI

Vendorwpsoul ProductGreenshift – animation and page builder blocks

Patch status unknownEPSS %02 mo ago

4.3

CVE-2026-5093Greenshift <= 12.8.9 - Authenticated (Contributor+) Theme Settings Modification via 'gspb_update_global_wp_settings'

Vendorwpsoul ProductGreenshift – animation and page builder blocks

Patch status unknownEPSS %02 mo ago

6.1

CVE-2026-93880Greenshift <= 13.2.0 - Reflected Cross-Site Scripting via '{{GET:}}' Dynamic Placeholder

Vendorwpsoul ProductGreenshift – animation and page builder blocks

Patch status unknownEPSS %027 d ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free key Documentation

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-107627"

CVE-2026-107627 · Greenshift <= 13.2.1 - Unauthenticated…