CVE-2024-44051

🗓️ 17 Sep 2024 22:19:17Reported by PatchstackType

Improper Input Neutralization in Johan van der Wijk Content Block

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-44051	18 Sep 202401:39	–	circl
CNNVD	WordPress plugin Content Blocks 跨站脚本漏洞	17 Sep 202400:00	–	cnnvd
Cvelist	CVE-2024-44051 WordPress Content Blocks (Custom Post Widget) plugin <= 3.3.5 - Cross Site Scripting (XSS) vulnerability	17 Sep 202422:19	–	cvelist
EUVD	EUVD-2024-40832	3 Oct 202520:07	–	euvd
NVD	CVE-2024-44051	17 Sep 202423:15	–	nvd
Patchstack	WordPress Content Blocks (Custom Post Widget) plugin <= 3.3.5 - Cross Site Scripting (XSS) vulnerability	5 Sep 202404:14	–	patchstack
Patchstack	WordPress Content Blocks (Custom Post Widget) Plugin <= 3.3.5 is vulnerable to Cross Site Scripting (XSS)	5 Sep 202400:00	–	patchstack
Positive Technologies	PT-2024-30919 · Unknown · Content Blocks	17 Sep 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-44051	23 May 202507:20	–	redhatcve
Vulnrichment	CVE-2024-44051 WordPress Content Blocks (Custom Post Widget) plugin <= 3.3.5 - Cross Site Scripting (XSS) vulnerability	17 Sep 202422:19	–	vulnrichment

NVD

Vulners

Node

vanderwijk content_blocksRange<3.3.6wordpress

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "custom-post-widget",
    "product": "Content Blocks (Custom Post Widget)",
    "vendor": "Johan van der Wijk",
    "versions": [
      {
        "changes": [
          {
            "at": "3.3.6",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "3.3.5",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
patchstack	www.patchstack.com/database/Wordpress/Plugin/custom-post-widget/vulnerability/wordpress-content-blocks-custom-post-widget-plugin-3-3-4-cross-site-scripting-xss-vulnerability

28 Apr 2026 16:10Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.15.4 - 6.5

EPSS0.00261

SSVC

CWE-79