Vulnerabilities / Custom Query Blocks
Custom Query Blocks vulnerabilities
Advisories WPSec published for Custom Query Blocks. Other sources may list more. Its attack surface: Custom Query Blocks on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-10 | WPSEC-2026-0756 | Custom Query Blocks <= 5.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Post Types Block Attributes | Medium 6.4 | 5.7.0 |
License: CC BY 4.0