CVE-2026-107629 | wpsoul Greenshift Plugin up to 13.2.1 on WordPress Latest Comments Block splittext.js comment cross site scripting

October 29, 2026 Yanac

A vulnerability identified as problematic has been detected in wpsoul Greenshift Plugin up to 13.2.1 on WordPress. Affected is an unknown function of the file splittext.js of the component Latest Comments Block. The manipulation of the argument Comment leads to cross site scripting.

This vulnerability is traded as CVE-2026-107629. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More