vanderwijk records
5 published records for vendor vanderwijk.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 40%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2024-3564No exploit | Content Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Local File Inclusion via Shortcodevanderwijk · content blocks · CWE-98 | High8.8 | — | 0.6% | Jun 1, 2024 |
21Monitor | CVE-2024-3565No exploit | Content Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via content_block Shortcodevanderwijk · content blocks · CWE-79 | Medium5.4 | — | 0.3% | Jun 1, 2024 |
21Monitor | CVE-2024-6432No exploit | Content Blocks (Custom Post Widget) <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via content Parametervanderwijk · content blocks · CWE-79 | Medium5.4 | — | 0.3% | Feb 20, 2025 |
21Monitor | CVE-2024-44051No exploit | WordPress Content Blocks (Custom Post Widget) plugin <= 3.3.5 - Cross Site Scripting (XSS) vulnerabilityvanderwijk · content blocks · CWE-79 | Medium5.4 | — | 0.2% | Sep 17, 2024 |
21Monitor | CVE-2024-34566No exploit | WordPress Content Blocks (Custom Post Widget) plugin <= 3.3.0 - Cross Site Scripting (XSS) vulnerabilityvanderwijk · content blocks · CWE-79 | Medium5.4 | — | 0.2% | May 8, 2024 |
- CVE-2024-356435Monitor
Content Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode
HighCVSS 8.8No exploitEPSS 0%vanderwijk · content blocksJun 1, 2024
- CVE-2024-356521Monitor
Content Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via content_block Shortcode
MediumCVSS 5.4No exploitEPSS 0%vanderwijk · content blocksJun 1, 2024
- CVE-2024-643221Monitor
Content Blocks (Custom Post Widget) <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via content Parameter
MediumCVSS 5.4No exploitEPSS 0%vanderwijk · content blocksFeb 20, 2025
- CVE-2024-4405121Monitor
WordPress Content Blocks (Custom Post Widget) plugin <= 3.3.5 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%vanderwijk · content blocksSep 17, 2024
- CVE-2024-3456621Monitor
WordPress Content Blocks (Custom Post Widget) plugin <= 3.3.0 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%vanderwijk · content blocksMay 8, 2024