CVE-2026-0807

The Frontis Blocks plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.1.6. This is due to insufficient restriction on the 'url' parameter in the 'template_proxy' function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application via the '/template-proxy/' and '/proxy-image/' endpoint.

• CWE-918

• https://plugins.trac.wordpress.org/browser/frontis-blocks/tags/1.1.4/includes/Admin/Admin.php#L910
• https://plugins.trac.wordpress.org/browser/frontis-blocks/trunk/includes/Admin/Admin.php#L910
• https://plugins.trac.wordpress.org/changeset/3444616/
• https://www.wordfence.com/threat-intel/vulnerabilities/id/322e0a27-9119-4b46-a043-d3a68c4fcdc4?source=cve

Published

Jan 24, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-0800The User Submitted Posts – Enable Users to Submit Posts from…7.2
• CVE-2026-0802An ACAP configuration file lacked sufficient input validatio…7.3
• CVE-2026-0803A vulnerability was found in PHPGurukul Online Course Regist…8.8
• CVE-2026-0804An ACAP configuration file lacked sufficient input validatio…7.3
• CVE-2026-0805An input neutralization vulnerability in the Backup Configur…8.8
• CVE-2026-0806The WP-ClanWars plugin for WordPress is vulnerable to SQL In…4.9
• CVE-2026-0808The Spin Wheel plugin for WordPress is vulnerable to client-…5.3
• CVE-2026-0809Use of a custom token encoding algorithm in Streamsoft Prest…6.3
• CVE-2026-0810A flaw was found in gix-date. The `gix_date::parse::TimeBuf:…7.1
• CVE-2026-0811The Advanced Contact form 7 DB plugin for WordPress is vulne…5.4
• CVE-2026-0812The LinkedIn SC plugin for WordPress is vulnerable to Stored…4.4
• CVE-2026-0813The Short Link plugin for WordPress is vulnerable to Stored …4.4