Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2026-17565

Animation Addons for Elementor < 2.7.2 - Unauthenticated Server-Side Request Forgery

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Animation Addons for Elementor WordPress plugin before 2.7.2 does not validate a user-supplied value before using it to build the host of a server-side HTTP request, allowing unauthenticated users to make the site issue requests to internal hosts and read the responses back.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Animation Addons for Elementor

Default version status: unaffected

  • 0 to < 2.7.2affected

References