CVE-2026-17565

The Animation Addons for Elementor WordPress plugin, in versions prior to 2.7.2 , is vulnerable to an Unauthenticated Server-Side Request Forgery (SSRF) . The root cause is a failure to validate user-supplied values when constructing the host for server-side HTTP requests. This allows unauthentic...