Just Post Preview Widget

Just Post Preview Widget has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 8.8, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is PHP Remote File Inclusion, behind 1 of the records (100%).

The one issue recorded for Just Post Preview Widget has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by João Pedro Soares de Alcântara. Just Post Preview Widget is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.8.30.

Strategic Overview

Avg CVSSHigh
8.8/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all Just Post Preview Widget vulnerabilities before they are exploited.

Most severe open issueCVSS 8.8CVE-2025-32156

Just Post Preview Widget <= 1.1.1 - Authenticated (Contributor+) Local File Inclusion

Read the full analysis

Vulnerability Records

1 records
Just Post Preview Widget banner
Latestv1.1.1

Just Post Preview Widget

Alex Prokopenko / JustCoded

Author

Alex Prokopenko / JustCoded

5.0(1)
100/100
Last Updated
2017-03-06 (10y ago)
Active Installs
10+
Downloads
2,411
Requires WP
4.0+
Requires PHP
0+
Tested up to
WP 4.8.30
Created
2015-10-29 (11y ago)

This plugin is for developers who need easy to edit the complex layouts and insert different post tile blocks inside the layout, sidebars or page builders. By default, it has 3 pre-defined layouts; you can rewrite them in your theme or register custom layouts. Unfortunately the pre-defined layouts have no styles inside. (Because they will be overwritten in the theme 100% anyway). Template files To overwrite the pre-defined templates, you should create a folder with the name “just-post-preview” in the root of your theme and copy required templates from the /wp-content/plugins/just-post-preview/layous/ folder. File names format: jpp_layout_{layout key}.php You can find PHP comments on the top of the demo templates. They help your IDE to show you autocomplete boxes for available variables. Adding custom layout To add a custom layout, you need to add a new filter hook in your theme functions.php file: add_filter('jpp_post_preview_layouts', 'my_post_preview_layouts'); function my_post_preview_layouts($layouts){ $layouts['my_layout_key'] = 'My custom layout'; return $layouts; } After that hook you will need to create a template file in the /path/to/theme/just-post-preview folder with the name jpp_layout_my_layout_key.php. That’s all! FILL FREE TO CONTACT ME IF YOU FIND ANY BUGS/ISSUES! ISSUES TRACKER The project is also available on github. Please post your issues or feedbacks there. https://github.com/aprokopenko/just-post-preview

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C