Threats tagged 'ghsa-xm29-fpvf-vc6h'

The Greenshift WordPress plugin (animation and page builder blocks) up to version 13.2.2 is vulnerable to sensitive information exposure. An unauthenticated attacker can exploit a crafted GET parameter to cause a logged-in user's HttpOnly WordPress session cookie (wordpress_logged_in_*) to be leaked via an image request to an attacker-controlled host. Exploitation requires that the site publisher has configured a public GreenShift Element image block with a {{GET:}} placeholder in the src attribute and that a logged-in user visits the malicious link. This vulnerability is not present in the plugin's default configuration.