WP Order By

WP Order By has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for WP Order By has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Le Ngoc Anh. WP Order By is installed on roughly 90 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.5.33.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all WP Order By vulnerabilities before they are exploited.

Most severe open issueCVSS 6.1CVE-2025-22765

WP Order By <= 1.4.2 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Showing 1–1 of 1 reports
Plugin Profile
Latestv1.4.2

WP Order By

weiluri

Author

weiluri

5.0(7)
100/100
Last Updated
2016-04-27 (11y ago)
Active Installs
90+
Downloads
5,774
Requires WP
4.1+
Requires PHP
0+
Tested up to
WP 4.5.33
Created
2015-10-26 (11y ago)

Simple and easy way to order your posts, pages or any other custom post-type in a various options, with the ability to define a different order option for each content type. A new menu will appear on the admin side-menu under each content type that is defined on your site (posts, pages etc.) and it will also be added automatically to future custom post types you will add in the future. In addition, under the Settings menu in WordPress you will find a general settings sub-menu to set global options for the plugin. Something is wrong with this plugin on your site? Please create a ticket at WordPress forum, Or email me to weiluri@gmail.com and I’ll fix it. You are welcome to suggest and request features to be added to the next versions. I’ll be glad to hear. Ordering Options Date Last Modified Date Title Author Post,Page or post-type Id Post/Page Parent Id Menu Order Randomly Number of Comments By Custom Field Extra Feature Exclude ordering for a specific page/s on your site I’ll appreciate if you rate me or write a review on the plugin page. I’m doing my best to maintain and improve this plugin. if you feel like donating a small amount, of your choice, through the donation link on the plugin page, I will be very glad 🙂 Enjoy…

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C