Arbitrary URL Fetching Vulnerability in Greenshift WordPress Plugin
CVE-2026-83543
Currently unrated
Key Information:
- Vendor
WordPress
- Status
- Vendor
- CVE Published:
- 5 September 2026
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-83543?
The Greenshift WordPress plugin prior to version 13.2.0 contains a vulnerability that permits users with contributor-level access or higher to provide unvalidated URLs for server-side fetching. This flaw enables these users to create unrestricted requests to arbitrary external hosts, which may expose server responses and sensitive data, thereby posing a significant security concern. Proper validation and sanitization of user-supplied URLs are essential to mitigate this vulnerability.
Affected Version(s)
Greenshift 0 < 13.2.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.