Custom Category Post Order
Custom Category Post Order has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for Custom Category Post Order has a vendor fix available, so running the current release closes it.
All of these findings were reported by domiee13. Custom Category Post Order is installed on roughly 500 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2025-29013Custom Category/Post Type Post order <= 1.6.0 - Missing Authorization
Read the full analysisVulnerability Records

Custom Category Post Order
Author
faaiq
Custom Post Order is a powerful WordPress plugin that lets you reorder posts using a simple drag-and-drop interface. Organize content based on custom post types or specific categories, allowing each category or post type to have its own unique post order. Ideal for bloggers, content managers, and website owners who want full control over post display order without altering database content. Key Features: Custom post order for Home page (pro) Drag & Drop Post Reordering – Quickly rearrange posts by hand with an intuitive interface. Category-Specific Post Order – Sort and manage posts independently within each selected category. Custom Post Type Sorting – Organize any custom post type with flexible ordering options. Soft Delete Option – Hide posts from display without deleting them from the WordPress database. One-Click Alphabetical or Reverse Sorting (Premium Feature) – Automatically arrange posts A–Z or Z–A. Enable or Disable Sorting Functionality – Easily toggle ordering for specific post types or categories. Multilingual support added — translations now available for French, German, Italian, Russian, and Polish. Additional languages can be added upon request. Optimize your content structure, improve user experience, and take full control of how posts are displayed with the Custom Post Order Plugin for WordPress. Arbitrary section 1
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C