Log in Start free

vanderwijk

Products

ProductCVEsExploitedLatest
Content Blocks (Custom Post Widget)4–Apr 18, 2026

Exploited and recent CVEs

  • CVE-2026-0894 Medium 6.4 Content Blocks (Custom Post Widget) <= 3.3.9 - Authenticated (Author+) Stored Cross-Site Scripting via content_block Shortcode 0.2%
  • CVE-2024-6432 Medium 6.4 Content Blocks (Custom Post Widget) <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via content Parameter 0.3%
  • CVE-2024-3564 High 8.8 Content Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode 0.6%
  • CVE-2024-3565 Medium 6.4 Content Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via content_block Shortcode 0.3%