THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-5093 (MEDIUM 4.3) — The GreenShift – Animation and Page Builder Blocks plugin for WordPress is vulnerable to unauthorized modification of data in versions up to, and including, 12.8.9. This is due to a missing capability check on the 'gspb_update_global_wp_settings' function that only verifies the '

[NVD] CVE-2026-5093 (MEDIUM 4.3) — The GreenShift – Animation and Page Builder Blocks plugin for WordPress is vulnerable to unauthorized modification of data in versions up to, and including, 12.8.9. This is due to a missing capability check on the 'gspb_update_global_wp_settings' function that only verifies the '

mednvdPublished 2026-08-22

CVE-2026-5093 CVSS: 4.3 MEDIUM Published: 2026-08-22T14:16:33.210

The GreenShift – Animation and Page Builder Blocks plugin for WordPress is vulnerable to unauthorized modification of data in versions up to, and including, 12.8.9. This is due to a missing capability check on the 'gspb_update_global_wp_settings' function that only verifies the 'edit_posts' capability instead of requiring administr

MITRE ATT&CK techniques

DefacementT1491

Indicators of compromise

CVE-2026-5093cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-5093