CVE-2026-17565

Name of the Vulnerable Software and Affected Versions Animation Addons for Elementor versions prior to 2.7.2

Description Insufficient validation of user-supplied values allows unauthenticated users to manipulate the host of a server-side HTTP request. This enables the site to issue requests to internal hosts and read the responses back, a behavior known as Server-Side Request Forgery (SSRF), where an attacker induces the server to make requests to an unintended location.

Recommendations Update Animation Addons for Elementor to version 2.7.2 or later.