Plugin icon

Content Blocks (Custom Post Widget)

custom-post-widget

Vulnerabilities:

6

Last Updated:

September 21, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-04-17
Title
Content Blocks (Custom Post Widget) < 3.4.1 - Authenticated (Author+) Stored Cross-Site Scripting via content_block Shortcode
Fixed in
Fixed in 3.4.1
CVSS
5.5 (medium)
Published
2025-02-19
Title
Content Blocks (Custom Post Widget) < 3.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via content Parameter
Fixed in
Fixed in 3.3.6
CVSS
6.4 (medium)
Published
2024-09-05
Title
Content Blocks (Custom Post Widget) < 3.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.3.6
CVSS
6.4 (medium)
Published
2024-05-31
Title
Content Blocks (Custom Post Widget) < 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via content_block Shortcode
Fixed in
Fixed in 3.3.1
CVSS
6.4 (medium)
Published
2024-05-31
Title
Content Blocks (Custom Post Widget) < 3.3.1 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Fixed in
Fixed in 3.3.1
CVSS
8.8 (high)
Published
2024-05-07
Title
Content Blocks (Custom Post Widget) < 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.3.1
CVSS
6.4 (medium)