What is the CVSS score of CVE-2025-68030?

CVE-2025-68030 has a CVSS 3.1 base score of 7.2 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N. EPSS exploitation probability: 0.0%.

Which versions of WP Messiah Frontis Blocks are affected by CVE-2025-68030?

A server-side request forgery (SSRF) vulnerability in the WP Messiah Frontis Blocks plugin allows attackers to make unauthorized requests from your WordPress server, potentially exposing internal…

How to fix or mitigate CVE-2025-68030?

Within 24 hours: Inventory all WordPress installations using the Frontis Blocks plugin and disable it immediately or remove it if unused. Within 7 days: Implement network-level compensating controls (WAF rules to block suspicious requests, restrict outbound connections from WordPress servers). Within 30 days: Monitor for patch release from WP Messiah and establish a testing environment to validate and deploy the fix once available.

WP Messiah Frontis Blocks CVE-2025-68030

HIGH

Server-Side Request Forgery (SSRF) (CWE-918)

2026-01-22 audit@patchstack.com

SSRF

7.2

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.2 HIGH

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Jan 22, 2026 - 17:16 nvd

HIGH 7.2

DescriptionCVE.org

Server-Side Request Forgery (SSRF) vulnerability in WP Messiah Frontis Blocks frontis-blocks allows Server Side Request Forgery.This issue affects Frontis Blocks: from n/a through <= 1.1.5.

AnalysisAI

WP Messiah Frontis Blocks frontis-blocks is affected by server-side request forgery (ssrf) (CVSS 7.2).

Technical ContextAI

This vulnerability (CWE-918: Server-Side Request Forgery (SSRF)) affects WP Messiah Frontis Blocks frontis-blocks. Server-Side Request Forgery (SSRF) vulnerability in WP Messiah Frontis Blocks frontis-blocks allows Server Side Request Forgery.This issue affects Frontis Blocks: from n/a through <= 1.1.5.