# vanderwijk Content Blocks (Custom Post Widget).

Every CVE that names vanderwijk Content Blocks (Custom Post Widget) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Content Blocks (Custom Post Widget) <= 3.3.9 - Authenticated (Author+) Stored Cross-Site Scripting via content_block Shortcode](https://agentprime.io/advisories/CVE-2026-0894.md)
  `CVE-2026-0894` · CVE record: vanderwijk Content Blocks (Custom Post Widget) · CVSS 6.4 Medium · Not analysed yet · Published 18 Apr 2026 · Tags: Cross-site scripting (XSS)
- [Content Blocks (Custom Post Widget) <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via content Parameter](https://agentprime.io/advisories/CVE-2024-6432.md)
  `CVE-2024-6432` · CVE record: vanderwijk Content Blocks (Custom Post Widget) · CVSS 6.4 Medium · Not analysed yet · Published 20 Feb 2025 · Tags: Cross-site scripting (XSS)
- [Content Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode](https://agentprime.io/advisories/CVE-2024-3564.md)
  `CVE-2024-3564` · CVE record: vanderwijk Content Blocks (Custom Post Widget) · CVSS 8.8 High · Not analysed yet · Published 1 Jun 2024 · Tags: File inclusion
- [Content Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via content_block Shortcode](https://agentprime.io/advisories/CVE-2024-3565.md)
  `CVE-2024-3565` · CVE record: vanderwijk Content Blocks (Custom Post Widget) · CVSS 6.4 Medium · Not analysed yet · Published 1 Jun 2024 · Tags: Cross-site scripting (XSS)

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=vanderwijk-content-blocks-custom-post-widget>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/vanderwijk-content-blocks-custom-post-widget/>. Everything for agents: <https://agentprime.io/llms.txt>.