CVE-2026-83543 — Greenshift < 13.2.0 - Contributor+ SSRF via get-csv-to-json REST Endpoint

CVE-2026-83543

Greenshift < 13.2.0 - Contributor+ SSRF via get-csv-to-json REST Endpoint PUBLISHED

Description (CNA)

The Greenshift WordPress plugin before 13.2.0 does not validate a user-supplied URL before fetching it server-side, allowing users with contributor-level access and above to make the server issue requests to arbitrary hosts and read the response.

Affected (CNA)

Vendor / product	Versions
Unknown / Greenshift	affected 0 before 13.2.0

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/902e46ad-e577-4a3e-be19-a3bcc75ece77/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.