CVE-2026-0894 | vanderwijk Content Blocks Plugin up to 3.3.9 on WordPress Custom Post Widget content_block cross site scripting

April 18, 2026 Yanac

A vulnerability, which was classified as problematic, was found in vanderwijk Content Blocks Plugin up to 3.3.9 on WordPress. Affected is the function content_block of the component Custom Post Widget. Executing a manipulation can lead to cross site scripting.

This vulnerability is tracked as CVE-2026-0894. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More