PT-2026-23575 · Google+5 · Google Maps+6

Quốc Huy · Publicado 2026-03-05 · Atualizado 2026-03-06 · CVE-2026-2589

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Greenshift – animation and page builder blocks versions through 12.8.3

Description The Greenshift plugin for WordPress is susceptible to exposure of sensitive information. This occurs due to the automated Settings Backup being stored in a publicly accessible file, allowing unauthenticated attackers to extract data. Compromised data includes API keys for OpenAI, Claude, Google Maps, Gemini, DeepSeek, and Cloudflare Turnstile.

Recommendations Versions prior to 12.8.3 should be updated.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2026-2589

Produtos afetados

Claude

Cloudflare Turnstile

Deepseek

Gemini

Google Maps

Greenshift

Openai

Referências · 4

• https://t.me/CVEtracker/46533 · Publicação no Telegram
• https://plugins.trac.wordpress.org/changeset/3465111 · Nota
• https://wordfence.com/threat-intel/vulnerabilities/id/2be2e028-81b8-4fd9-8197-eccf391fee65?source=cve · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-2589 · Nota de Segurança