wpsoul CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM wpsoul CVE published 2026-08-22

CVE-2026-5093

The GreenShift – Animation and Page Builder Blocks plugin for WordPress is vulnerable to unauthorized modification of data. A missing capability check on the 'gspb_update_global_wp_settings' function allows authenticated attackers with contributor-level access and above to modify global WordPress theme color settings site-wide, leading to site defacement.