My Post Order

My Post Order has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for My Post Order has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.

All of these findings were reported by Skalucy. My Post Order is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 3.5.2.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all My Post Order vulnerabilities before they are exploited.

Most severe open issueCVSS 6.1CVE-2025-68004

My Post Order <= 1.2.1.1 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Showing 1–1 of 1 reports
My Post Order banner
Latestv1.2.1.1

My Post Order

Kapil Chugh

Author

Kapil Chugh

2.9(7)
58/100
Last Updated
2013-01-11 (14y ago)
Active Installs
400+
Downloads
61,578
Requires WP
3.0+
Requires PHP
0+
Tested up to
WP 3.5.2
Created
2011-11-08 (15y ago)

While WordPress allows you to make your posts sticky, or even sort them in ascending or descending order, sometimes this is just not enough. What if you want to display the posts in ANY order you need? Unfortunately there is no such functionality in WordPress, which is where this plugin saves the day. This plugin works on sections of posts, which you can define based on the following three criteria: Select posts individually : You can use the drag-and-drop feature to rearrange posts in ANY order. Select a category : You can also select posts from any category and change the posts order. Show XML/RSS Feed : Here you just need to give the URL of XML Feed and it will fetch latest feed/posts. You can display ordered posts in theme with query_posts or get_posts or WP_Query like this : query_posts(&#8216;section_name=NAME_OF_SECTION’); Here NAME_OF_SECTION must be replaced with your actual section name. If no section found with mentioned name then nothing will change. OR Once the sections are created, you can display these posts using widgets. If you are using custom template option in widget then template file should be placed in custom-templates folder of your plugin (/wp-content/plugins/my-posts-order/includes/custom-templates/loop.php) and (/wp-content/plugins/my-posts-order/includes/custom-templates/loop_rss.php). Now wasn’t that easy!

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C