Just Post Preview Widget
Just Post Preview Widget has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 8.8, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is PHP Remote File Inclusion, behind 1 of the records (100%).
The one issue recorded for Just Post Preview Widget has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by João Pedro Soares de Alcântara. Just Post Preview Widget is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.8.30.
CVE-2025-32156Just Post Preview Widget <= 1.1.1 - Authenticated (Contributor+) Local File Inclusion
Read the full analysisVulnerability Records

Just Post Preview Widget
Author
Alex Prokopenko / JustCoded
This plugin is for developers who need easy to edit the complex layouts and insert different post tile blocks inside the layout, sidebars or page builders. By default, it has 3 pre-defined layouts; you can rewrite them in your theme or register custom layouts. Unfortunately the pre-defined layouts have no styles inside. (Because they will be overwritten in the theme 100% anyway). Template files To overwrite the pre-defined templates, you should create a folder with the name “just-post-preview” in the root of your theme and copy required templates from the /wp-content/plugins/just-post-preview/layous/ folder. File names format: jpp_layout_{layout key}.php You can find PHP comments on the top of the demo templates. They help your IDE to show you autocomplete boxes for available variables. Adding custom layout To add a custom layout, you need to add a new filter hook in your theme functions.php file: add_filter('jpp_post_preview_layouts', 'my_post_preview_layouts'); function my_post_preview_layouts($layouts){ $layouts['my_layout_key'] = 'My custom layout'; return $layouts; } After that hook you will need to create a template file in the /path/to/theme/just-post-preview folder with the name jpp_layout_my_layout_key.php. That’s all! FILL FREE TO CONTACT ME IF YOU FIND ANY BUGS/ISSUES! ISSUES TRACKER The project is also available on github. Please post your issues or feedbacks there. https://github.com/aprokopenko/just-post-preview
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C