Greenshift – animation and page builder blocks, CVE-2026-2589

CVE, Research URL: CVE-2026-2589
Home page URL: Security reports for Greenshift – animation and page builder blocks
Application: Greenshift – animation and page builder blocks
Published on: Mar 06, 2026
Research Description: The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 12.8.3 via the automated Settings Backup stored in a publicly accessible file. This makes it possible for unauthenticated attackers to extract sensitive data including the configured OpenAI, Claude, Google Maps, Gemini, DeepSeek, and Cloudflare Turnstile API keys.
Affected versions: max 12.8.4.
Status: vulnerable

Greenshift &#8211; animation and page builder blocks, CVE-2026-2589