Content Blocks (Custom Post Widget)
custom-post-widget · plugin
Known security vulnerabilities for Content Blocks (Custom Post Widget). Find out in seconds which version runs on your site with WP Lens.
6 known vulnerabilities
latest Apr 18, 2026
Vulnerabilities
- High 8.8
Content Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode
- Medium 6.4
Content Blocks (Custom Post Widget) <= 3.3.9 - Authenticated (Author+) Stored Cross-Site Scripting via content_block Shortcode
- Medium 5.4
Content Blocks (Custom Post Widget) <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via content Parameter
- Medium 5.4
WordPress Content Blocks (Custom Post Widget) plugin <= 3.3.5 - Cross Site Scripting (XSS) vulnerability
- Medium 5.4
Content Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via content_block Shortcode
- Medium 5.4
WordPress Content Blocks (Custom Post Widget) plugin <= 3.3.0 - Cross Site Scripting (XSS) vulnerability