Plugin icon

Custom Query Blocks

post-type-archive-mapping

Vulnerabilities:

4

Last Updated:

October 9, 2026

Active Installs:

700

Published
Title
Fixed in
CVSS
Published
2026-10-12
Title
Custom Query Blocks < 5.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 5.7.0
CVSS
5.5 (medium)
Published
2026-02-12
Title
Custom Query Blocks < 5.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 5.6.0
CVSS
5.5 (medium)
Published
2024-08-29
Title
Custom Query Blocks <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
No known fix
CVSS
6.4 (medium)
Published
2024-07-22
Title
Custom Query Blocks < 5.3.0 - Missing Authorization via REST Routes
Fixed in
Fixed in 5.3.0
CVSS
5.3 (medium)