WordPress Plugin Vulnerabilities

Greenshift < 13.2.0 - Contributor+ SSRF via get-csv-to-json REST Endpoint

Description

The plugin does not validate a user-supplied URL before fetching it server-side, allowing users with contributor-level access and above to make the server issue requests to arbitrary hosts and read the response.

Proof of Concept

Affects Plugins

Plugin icon
greenshift-animation-and-page-builder-blocks
Fixed in 13.2.0

References

CVE
CVE-2026-83543

Classification

Type
SSRF
OWASP top 10
A1: Injection
CWE
CWE-918
CVSS
4.1 (medium)

Miscellaneous

Original Researcher
Alireza Kalhor
Submitter
Alireza Kalhor
Verified
Yes
WPVDB ID
902e46ad-e577-4a3e-be19-a3bcc75ece77

Timeline

Publicly Published
2026-09-03 (about 2 days ago)
Added
2026-09-03 (about 1 day ago)
Last Updated
2026-09-03 (about 1 day ago)

Other

Published
Title
Published
2024-06-18
Title
WordPress Picture / Portfolio / Media Gallery <= 3.0.1 - Unauthenticated Server-Side Request Forgery
Published
2025-10-21
Title
Hercules Core <= 7.4 - Authenticated (Subscriber+) Server-Side Request Forgery
Published
2026-03-20
Title
Post Affiliate Pro <= 1.28.0 - Authenticated (Administrator+) Server-Side Request Forgery via 'Post Affiliate Pro URL' Field
Published
2025-01-24
Title
Chained Quiz < 1.3.3 - Authenticated (Admin+) Server-Side Request Forgery
Published
2025-09-27
Title
Image shrinker <= 1.1.0 - Authenticated (Subscriber+) Server-Side Request Forgery