CVE-2026-0807 Frontis Blocks <= 1.1.6 - Unauthenticated Server-Side Request Forgery via 'url' Parameter
HighCVSS 7.2
EPSS 0.36%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Frontis Blocks plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.1.6. This is due to insufficient restriction on the 'url' parameter in the 'template_proxy' function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application via the '/template-proxy/' and '/proxy-image/' endpoint.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wpmessiah Frontis Blocks — Block Library for the Block Editor | <= 1.1.6 | No fix listed |
| wordpress frontis-blocks(WordPress) | < 1.1.7 | 1.1.7 |