The Greenshift WordPress plugin allows a contributor or higher‑privileged user to submit a URL that the server will retrieve without validation, causing the server to make arbitrary HTTP requests and return the response. This flaw makes the site vulnerable to server side request forgery, potentially enabling attackers to access internal resources, exfiltrate data, or pivot to other systems if the server can reach privileged hosts.

The vulnerability exists in all versions of the Greenshift plugin released before 13.2.0. Users running any of those versions, especially with contributor‑level or higher roles in WordPress, are at risk. Upgrading to 13.2.0 or later removes the unvalidated fetch capability.

No CVSS score is listed in the public data, but the nature of SSRF grants the attacker ability to probe internal networks, suggesting a high severity. The EPSS score is not available, and the vulnerability is not currently listed in the CISA KEV catalog. Attackers would need contributor‑level access to the WordPress site and would exploit the get‑csv‑to‑json REST endpoint by supplying a crafted URL parameter. Because the plugin runs the request on the server, the attack can retrieve responses from arbitrary hosts, including internal IP ranges, without additional network exposure.