WP Query Creator
WP Query Creator has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for WP Query Creator has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by SOPROBRO. WP Query Creator is installed on roughly 80 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.5.10.
CVE-2025-22264WP Query Creator <= 1.0 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records
WP Query Creator
Author
Patel
This plugin lets you create new WP queries and use shortcodes for queries on your pages. WP query creator is the simplest way to build wp_query without writing a single line of code. Sometimes when you want to display a post or custom post loop middle of the page, you need to create a new page template OR create a new shortcode in functions.php. In this case, WP query creator is very helpful for you, just create a new WP query through this plugin and use this sort code in your page editor. DEMO SCREEN RECORDING Features You can create multiple WP queries with different options Custom post type support Ascending or descending order and Sort retrieved posts Show posts associated with certain categories, taxonomies & tags Show posts based on a keyword search Admin option for update HTML Support this plugin Contact me at tarakpatel18@gmail.com if you have any questions And don’t forget to rate this plugin if you like it. Thank You
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C