Query Posts

Explore Query Posts vulnerabilities across all versions. Currently tracking 1 known vulnerabilities, including severity, impact, and patch status.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Query Posts vulnerabilities before they are exploited.

Vulnerability Records

1 records


2025-09-28 00:00	Query Posts <= 0.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Query Posts <= 0.3.2	`CVE-2025-62905`	6.4 Medium	Muhammad Yudha - DJ	No

Showing 1–1 of 1 reports

Plugin Profile

Latestv0.3.2

Query Posts

Author

Justin Tadlock

3.0(4)

60/100

Last Updated

2017-11-28 (9y ago)

Active Installs

800+

Downloads

78,955

Requires WP

3.0+

Requires PHP

Tested up to

WP 3.0.5

Created

2009-03-15 (18y ago)

The Query Posts widget was written to allow users that don’t know their way around PHP to easily show posts in any way they’d like. It’s like having a cool WordPress developer as a friend ready to do your bidding. Seriously. The widget has over 40 options to choose from. You can list posts by category, tag, custom taxonomies, author, date, time, name, or anything you can imagine. You can choose to show the full content, excerpts, or even a simple list. You can order the posts in all sorts of ways. Oh, and you can even show pages. This is the widget that keeps users out of the code and gives them the ability to display items on their site how they want.

View on WordPress.org