CVE-2026-17565 in Animation Addons for Elementor Plugin

Riassunto

di MITRE • 19/08/2026

The Animation Addons for Elementor WordPress plugin before 2.7.2 does not validate a user-supplied value before using it to build the host of a server-side HTTP request, allowing unauthenticated users to make the site issue requests to internal hosts and read the responses back.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsabile: WPScan
• Prenotare: 27/07/2026
• Divulgazione: 19/08/2026
• Moderazione: accettato
• Voce: VDB-392965
• CPE: pronto
• CWE: CWE-918 (confermato)
• CVSS: 5.3 (VulDB)
• EPSS: 0.00146
• KEV: no
• Attività: basso
• Settore: Hostingprovider

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-17565
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-17565
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-17565/