Unknown Animation Addons For Elementor vulnerabilities

2 CVEs affecting Unknown Animation Addons For Elementor, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-17565, published 2026-08-19.

More from Unknown.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-17565, published 2026-08-19. High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days. The Animation Addons for Elementor WordPress plugin before 2.7.2 does not validate a user-supplied value before using it to build the host of a server-side HTTP request, allowing unauthenticated…
• CVE-2026-13330, published 2026-07-30. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. The Animation Addons for Elementor WordPress plugin before 2.7.0 does not sanitise uploaded SVG/SVGZ files, which it adds to the list of allowed upload types, allowing users with the upload_files…