CVE-2026-17565 — Animation Addons for Elementor < 2.7.2 - Unauthenticated Server-Side Request Forgery

CVE-2026-17565

Animation Addons for Elementor < 2.7.2 - Unauthenticated Server-Side Request Forgery PUBLISHED

Description (CNA)

The Animation Addons for Elementor WordPress plugin before 2.7.2 does not validate a user-supplied value before using it to build the host of a server-side HTTP request, allowing unauthenticated users to make the site issue requests to internal hosts and read the responses back.

Affected (CNA)

Vendor / product	Versions
Unknown / Animation Addons for Elementor	affected 0 before 2.7.2

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/e88e0b71-145c-4edd-9b62-783215b64c67/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.