Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Content Blocks (Custom Post Widget) — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in Content Blocks (Custom Post Widget), with AI-generated Chinese analysis, references, and POCs.

Vendor: Johan van der Wijk

CVE ID Title CVSS Severity Published
CVE-2026-0894 Content Blocks (Custom Post Widget) <= 3.3.9 - Authenticated (Author+) Stored Cross-Site Scripting via content_block Shortcode CWE-79 6.4 Medium 2026-04-18
CVE-2024-6432 Content Blocks (Custom Post Widget) <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via content Parameter CWE-79 6.4 Medium 2025-02-20
CVE-2024-44051 WordPress Content Blocks (Custom Post Widget) plugin <= 3.3.5 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2024-09-17
CVE-2024-3565 Content Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via content_block Shortcode CWE-79 6.4 Medium 2024-06-01
CVE-2024-3564 Content Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode CWE-98 8.8 High 2024-06-01
CVE-2024-34566 WordPress Content Blocks (Custom Post Widget) plugin <= 3.3.0 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2024-05-08

All 6 known CVE vulnerabilities affecting Content Blocks (Custom Post Widget) with full Chinese analysis, references, and POCs where available.