Skip to content
OpenAdvisories

Vendor

vanderwijk

4 known vulnerabilities.

Products

Content Blocks (Custom Post Widget) 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2024-3564

    Content Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode

    The Content Blocks (Custom Post Widget) plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.3.0 via the plugin's 'content_block' shortcode. This makes it possible for authenticated attackers, with contributor-lev…

    vanderwijk Content Blocks (Custom Post Widget) Web / CMS