Content Blocks
Vanderwijk · 5 CVEs
CVE-2024-6432
MEDIUM
Content Blocks (Custom Post Widget) <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via content Par…
Feb 20, 2025
CVE-2024-44051
MEDIUM
WordPress Content Blocks (Custom Post Widget) plugin <= 3.3.5 - Cross Site Scripting (XSS) vulnerability
Sep 17, 2024
CVE-2024-3564
HIGH
Content Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Jun 1, 2024
CVE-2024-3565
MEDIUM
Content Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via content_blo…
Jun 1, 2024
CVE-2024-34566
MEDIUM
WordPress Content Blocks (Custom Post Widget) plugin <= 3.3.0 - Cross Site Scripting (XSS) vulnerability
May 8, 2024
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2024-6432 | Content Blocks (Custom Post Widget) <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via content Parameter | MEDIUM | 0.31% | Feb 20, 2025 |
| CVE-2024-44051 | WordPress Content Blocks (Custom Post Widget) plugin <= 3.3.5 - Cross Site Scripting (XSS) vulnerability | MEDIUM | 0.28% | Sep 17, 2024 |
| CVE-2024-3564 | Content Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode | HIGH | 0.62% | Jun 1, 2024 |
| CVE-2024-3565 | Content Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via content_block Shortcode | MEDIUM | 0.31% | Jun 1, 2024 |
| CVE-2024-34566 | WordPress Content Blocks (Custom Post Widget) plugin <= 3.3.0 - Cross Site Scripting (XSS) vulnerability | MEDIUM | 0.25% | May 8, 2024 |
Showing 1 to 5 of 5 CVEs