Custom Category Post Order

Custom Category Post Order has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for Custom Category Post Order has a vendor fix available, so running the current release closes it.

All of these findings were reported by domiee13. Custom Category Post Order is installed on roughly 500 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.

Strategic Overview

Avg CVSSMedium
4.3/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Custom Category Post Order vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.3CVE-2025-29013

Custom Category/Post Type Post order <= 1.6.0 - Missing Authorization

Read the full analysis

Vulnerability Records

1 records
Custom Category Post Order banner
Latestv2.2

Custom Category Post Order

faaiq

Author

faaiq

3.2(19)
64/100
Last Updated
2025-11-28 (10mo ago)
Active Installs
500+
Downloads
37,558
Requires WP
3.3+
Requires PHP
0+
Tested up to
WP 6.8.8
Created
2012-07-04 (14y ago)

Custom Post Order is a powerful WordPress plugin that lets you reorder posts using a simple drag-and-drop interface. Organize content based on custom post types or specific categories, allowing each category or post type to have its own unique post order. Ideal for bloggers, content managers, and website owners who want full control over post display order without altering database content. Key Features: Custom post order for Home page (pro) Drag & Drop Post Reordering – Quickly rearrange posts by hand with an intuitive interface. Category-Specific Post Order – Sort and manage posts independently within each selected category. Custom Post Type Sorting – Organize any custom post type with flexible ordering options. Soft Delete Option – Hide posts from display without deleting them from the WordPress database. One-Click Alphabetical or Reverse Sorting (Premium Feature) – Automatically arrange posts A–Z or Z–A. Enable or Disable Sorting Functionality – Easily toggle ordering for specific post types or categories. Multilingual support added — translations now available for French, German, Italian, Russian, and Polish. Additional languages can be added upon request. Optimize your content structure, improve user experience, and take full control of how posts are displayed with the Custom Post Order Plugin for WordPress. Arbitrary section 1

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C