CVE-2026-83543
MediumCVSS 4.1Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
The Greenshift WordPress plugin before version 13.2.0 does not validate a user-supplied URL before fetching it server-side, allowing users with contributor-level access and above to make the server issue requests to arbitrary hosts and read the response.
Risk Assessment
An attacker can use the server to scan internal networks, attack other systems (SSRF), or read sensitive data from server responses.
Recommendation
Update the Greenshift plugin to version 13.2.0 or later, which includes the URL validation fix.
Other vulnerabilities in Greenshift WordPress plugin
See all- CVE-2026-93880Medium
The Greenshift – animation and page builder blocks plugin for WordPress (versions up to and including 13.2.0) is vulnerable to Reflected Cross-Site Scripting via the '{{GET:}}' Dynamic Placeholder. Due to insufficient input sanitization and output escaping, an unauthenticated attacker can inject arbitrary scripts that execute when a user is tricked into clicking a crafted link.
- CVE-2026-83544Medium
The Greenshift WordPress plugin before version 13.2.0 does not properly escape a block animation attribute before outputting it within an HTML attribute, allowing users with contributor-level access and above to inject arbitrary web scripts that execute when the content is viewed.
Original NVD description (English source)
The Greenshift WordPress plugin before 13.2.0 does not validate a user-supplied URL before fetching it server-side, allowing users with contributor-level access and above to make the server issue requests to arbitrary hosts and read the response.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS