What’s Vulnerable › Products

vanderwijk Content Blocks (Custom Post Widget) vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your vanderwijk Content Blocks (Custom Post Widget) version is affected

Latest vanderwijk Content Blocks (Custom Post Widget) vulnerabilities

• CVE-2026-0894 — Content Blocks (Custom Post Widget) <= 3.3.9 - Authenticated (Author+) Stored Cross-Site Scripting via content_block Shortcode (CVSS 6.4)
• CVE-2024-6432 — Content Blocks (Custom Post Widget) <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via content Parameter (CVSS 5.4)
• CVE-2024-44051 — WordPress Content Blocks (Custom Post Widget) plugin <= 3.3.5 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2024-3565 — Content Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via content_block Shortcode (CVSS 5.4)
• CVE-2024-3564 — Content Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode (CVSS 8.8)
• CVE-2024-34566 — WordPress Content Blocks (Custom Post Widget) plugin <= 3.3.0 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)