What is the CVSS score of CVE-2026-0807?

CVE-2026-0807 has a CVSS 3.1 base score of 7.2 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N. EPSS exploitation probability: 0.0%.

Which versions of WordPress are affected by CVE-2026-0807?

The Frontis Blocks WordPress plugin contains a Server-Side Request Forgery vulnerability affecting all versions through 1.1.6, enabling attackers to manipulate server requests and potentially access…

How to fix or mitigate CVE-2026-0807?

Within 24 hours: Audit all WordPress installations to identify active use of Frontis Blocks plugin and document affected systems. Within 7 days: Disable the Frontis Blocks plugin or remove it entirely from all WordPress environments, or implement WAF rules blocking requests to the vulnerable 'template_proxy' function. Within 30 days: Evaluate alternative WordPress plugins for required functionality, conduct security assessment of potentially compromised systems, and review access logs for exploitation attempts.

WordPress CVE-2026-0807

HIGH

Server-Side Request Forgery (SSRF) (CWE-918)

2026-01-24 security@wordfence.com

WordPress SSRF

7.2

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.2 HIGH

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:59 vuln.today

CVE Published

Jan 24, 2026 - 08:16 nvd

HIGH 7.2

DescriptionCVE.org

The Frontis Blocks plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.1.6. This is due to insufficient restriction on the 'url' parameter in the 'template_proxy' function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application via the '/template-proxy/' and '/proxy-image/' endpoint.

AnalysisAI

Unauthenticated attackers can exploit a Server-Side Request Forgery vulnerability in the WordPress Frontis Blocks plugin (versions up to 1.1.6) through unvalidated URL parameters in the template proxy endpoints to perform arbitrary web requests from the affected server. This allows an attacker to scan internal networks, access local services, or exfiltrate sensitive data without authentication. No patch is currently available.

Technical ContextAI

Classified as CWE-918 (Server-Side Request Forgery (SSRF)). Affects Frontis Blocks (WordPress plugin). The Frontis Blocks plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.1.6. This is due to insufficient restriction on the 'url' parameter in the 'template_proxy' function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application via the '/template-proxy/' and '/proxy-image/' endpoint.