Advisories · Technology
vanderwijk Content Blocks (Custom Post Widget).
Every CVE that names vanderwijk Content Blocks (Custom Post Widget) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
Content Blocks (Custom Post Widget) <= 3.3.9 - Authenticated (Author+) Stored Cross-Site Scripting via content_block Shortcode
- vanderwijk Content Blocks (Custom Post Widget)
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Content Blocks (Custom Post Widget) <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via content Parameter
- vanderwijk Content Blocks (Custom Post Widget)
- Cross-site scripting (XSS)
- CVSS 8.8 High
Content Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode
- vanderwijk Content Blocks (Custom Post Widget)
- File inclusion
- CVSS 6.4 Medium
Content Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via content_block Shortcode
- vanderwijk Content Blocks (Custom Post Widget)
- Cross-site scripting (XSS)