Skip to content
PluginCanary

Post Grid

by PickPlugins · 30,000+ active installs · Checked 3 Nov 2026
Watch1 Warning

Watch: vulnerability published 4 Sep 2026, fixed in 2.3.23.

79/ 100 Canary Score
Sub-scores for Post Grid
Ownership100
Maintenance90
Security60
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 4 Sep 2026, fixed in 2.3.23. Update to version 2.3.23 or later.4 Sep 2026Evidence
  • InfoSEC-310 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
pickplugins3 Dec 2016 to 19 Jul 2026, 431 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
4 months ago
Releases, 24 months
26
Tested up to
7.0 vs 7.1
Requires PHP
not stated supported 8.2+
Releases per quarter for Post Grid
Q1 202411
Q2 20247
Q3 20249
Q4 20249
Q1 20256
Q2 20258
Q3 20250
Q4 20253
Q1 20262
Q2 20260
Q3 20261
Q4 20260

Last release 19 Jul 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Support

0% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
4 Sep 2026Post Grid and Gutenberg Blocks – ComboBlocks 2.2.85 - 2.3.22 - Unauthenticated Hook Injection9.82.2.85 to 2.3.222.3.230
21 Dec 2025Post Grid and Gutenberg Blocks <= 2.3.23 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.3.232.3.24n/a
3 Dec 2025Post Grid and Gutenberg Blocks <= 2.3.19 - Unauthenticated Insecure Direct Object Reference5.3<= 2.3.19Not affectedn/a
4 Oct 2025Post Grid and Gutenberg Blocks <= 2.3.17 - Missing Authorization4.3<= 2.3.172.3.1850
4 Oct 2025Post Grid and Gutenberg Blocks <= 2.3.17 - Missing Authorization4.3<= 2.3.172.3.1850
6 Aug 2025Post Grid and Gutenberg Blocks <= 2.3.11 - Authenticated (Contributor+) PHP Object Injection8.8<= 2.3.112.3.120
27 Feb 2025Post Grid and Gutenberg Blocks – ComboBlocks <= 2.3.6 - Unauthenticated User Information Exposure5.3<= 2.3.62.3.715
21 Feb 2025Post Grid and Gutenberg Blocks – ComboBlocks <= 2.3.5 - Unauthenticated Paid Order Creation5.3<= 2.3.52.3.62
14 Jan 2025Post Grid and Gutenberg Blocks 2.2.85 - 2.3.3 - Unauthenticated Privilege Escalation9.82.2.85 to 2.3.32.3.435
14 Jan 2025Post Grid and Gutenberg Blocks <= 2.2.92 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.2.922.2.930
24 Oct 2024Post Grid and Gutenberg Blocks <= 2.2.93 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.2.932.2.940
27 Sep 2024Post Grid and Gutenberg Blocks <= 2.2.89 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.2.892.2.900
10 Sep 2024Post Grid and Gutenberg Blocks 2.2.87 - 2.2.90 - Authenticated (Subscriber+) Privilege Escalation8.82.2.87 to 2.2.902.2.910
13 Aug 2024Gutenberg Blocks, Page Builder – ComboBlocks <= 2.2.87 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Block6.4<= 2.2.842.2.880
7 Aug 2024ComboBlocks <= 2.2.86 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.2.862.2.870
31 Jul 2024Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.85 - Authenticated (Contributor+) Stored Cross-Site Scripting via redirectURL Parameter of Date Countdown Widget6.4<= 2.2.852.2.860
6 Jun 2024Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel - Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attribute6.4<= 2.2.802.2.810
6 Jun 2024Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.2.802.2.810
20 May 2024Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 2.2.802.2.810
22 Apr 2024Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.78 - Unauthenticated Sensitive Information Exposure5.3<= 2.2.782.2.790
28 Mar 2024Post Grid <= 2.2.74 - Reflected Cross-Site Scripting6.1<= 2.2.742.2.760
19 Mar 2024Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel <= 2.2.74 - Information Exposure5.3<= 2.2.742.2.760
12 Mar 2024Post Grid Combo – 36+ Gutenberg Blocks <= 2.2.68 - Information Exposure via get_posts API Endpoint7.5<= 2.2.682.2.690
15 Dec 2023Post Grid Combo – 36+ Gutenberg Blocks <= 2.2.64 - Authenticated (Contributor+) Cross-Site Scripting6.4<= 2.2.642.2.650
11 Aug 2023Post Grid <= 2.2.50 - Missing Authorization to Sensitive Information Exposure via REST API7.5<= 2.2.502.2.51n/a

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for Post Grid
Q4 20235.0
Q1 20243.0
Q3 20241.0
Q4 20245.0

Average rating stayed at 5.0 between Q4 2023 and Q4 2024.

Rating distribution
5 star124
4 star12
3 star3
2 star2
1 star22
Latest low reviews

Momentum

30,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Post Grid
4 May 2026482
11 May 20261,025
18 May 2026861
25 May 20261,039
1 Jun 2026775
8 Jun 2026795
15 Jun 2026710
22 Jun 2026611
29 Jun 2026768
6 Jul 2026724
13 Jul 20268,054
20 Jul 20264,963
27 Jul 20261,917
3 Aug 20262,247
10 Aug 20261,269
17 Aug 20261,133
24 Aug 20261,486
31 Aug 20261,368
7 Sep 20261,166
14 Sep 20261,070
21 Sep 20261,058
28 Sep 2026965
5 Oct 20261,267
12 Oct 2026972
19 Oct 20261,484
26 Oct 20261,158
2 Nov 2026224

Weekly downloads over the last 4 weeks are 35% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

AnWP Post Grid and Post Carousel Slider for ElementorScore 91 · 20,000+WP Blog Post LayoutsScore 91 · 9,000+Display Post Types - Post Grid, post list and post slidersScore 91 · 8,000+Latest Posts Block - Dynamic Posts Grid, Posts List, Posts Tile with Stunning Layouts for WordPress Blogs & PagesScore 91 · 6,000+WP Ultimate Post GridScore 91 · 4,000+

Facts

Version2.3.24
AuthorPickPlugins
Added6 Feb 2015
Last updated19 Jul 2026
Active installs30,000+
Requires WordPress5.0.0
Tested up to7.0.8
Requires PHPnot stated
CategoryContent Management > Blog & Article Publishing
Tagspost grid, post filter, Post Masonry, posts slider, posts carousel

Other plugins by this author: Accordions, Breadcrumb - Breadcrumb for WooCommerce and Custom Post Types, Product Slider, Product Grid, Product Masonry, Related Posts By PickPlugins, Social Share Button, Team Showcase, PickPlugins Pricing Table, Wishlist, ComboBlocks - Block Library & Page Builder, PickPlugins Mail Picker - Email Marketing & Newsletters

Questions

Is Post Grid still maintained?

Post Grid was last updated on 19 Jul 2026. Its Canary status is Watch.

Is Post Grid safe?

Post Grid has no open unpatched vulnerabilities on record. 10 vulnerabilities were published in the last 24 months. Its Canary status is Watch.

Who owns Post Grid?

The wordpress.org author is PickPlugins. Recent committers: pickplugins, paratheme, plugin-master. We have recorded no ownership change.

What can I use instead of Post Grid?

Plugins in the same category with a higher Canary Score: AnWP Post Grid and Post Carousel Slider for Elementor, WP Blog Post Layouts, Display Post Types - Post Grid, post list and post sliders, Latest Posts Block - Dynamic Posts Grid, Posts List, Posts Tile with Stunning Layouts for WordPress Blogs & Pages, WP Ultimate Post Grid.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue