Query Posts
Avoid: vulnerability published 28 Sep 2025 still has no fix after 14 days.
Capped at 39 while a vulnerability has no patch.
| Ownership | 100 |
|---|---|
| Maintenance | 0 |
| Security | 35 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
- CriticalSEC-2Vulnerability published 28 Sep 2025 still has no fix after 14 days. Disable or replace the plugin. No fix has been released.12 Oct 2025Evidence
- CriticalMNT-1No release in 108 months (last release 28 Nov 2017). Plan a replacement if the plugin is important to your site.28 Nov 2018Evidence
- WarningMNT-2Tested up to WordPress 3.0.5, 41 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
Commit history is collected for plugins with 1,000+ installs or on a watchlist. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 9 years ago
- Releases, 24 months
- 0
- Tested up to
- 3.0 vs 7.1
- Requires PHP
- not stated supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 28 Nov 2017. Tested up to 3.0, 41 major versions behind WordPress 7.1.
Support
Support history appears after our first snapshots of the forum counts.
Security record
| Published | Issue | CVSS | Affected | Fixed in | Days to patch |
|---|---|---|---|---|---|
| 28 Sep 2025 | Query Posts <= 0.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting | 6.4 | <= 0.3.2 | No fix | n/a |
Source: Wordfence Intelligence.
Reputation
Lifetime rating 3.0 from 4 ratings. Quarterly trends appear as new reviews arrive.
| 5 star | 2 |
|---|---|
| 4 star | 0 |
| 3 star | 0 |
| 2 star | 0 |
| 1 star | 2 |
Momentum
700+ active installs. History builds with each weekly snapshot.
Momentum history builds with each snapshot.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 0.3.2 |
|---|---|
| Author | Justin Tadlock |
| Added | 15 Mar 2009 |
| Last updated | 28 Nov 2017 |
| Active installs | 700+ |
| Requires WordPress | 3.0 |
| Tested up to | 3.0.5 |
| Requires PHP | not stated |
| Category | Content Management > Blog & Article Publishing |
| Tags | page, pages, posts, widget, sidebar |
Other plugins by this author: Breadcrumb Trail, Get the Image, Cleaner Gallery, Custom Classes, Series, Widgets Reloaded, Grid Columns, Slideshow, Custom Header Extended, Clean My Archives, Custom Background Extended, Block Pattern Builder
Questions
Is Query Posts still maintained?
Query Posts was last updated on 28 Nov 2017. Its Canary status is Avoid.
Is Query Posts safe?
Query Posts has 1 published vulnerability with no patched version. Its Canary status is Avoid.
Who owns Query Posts?
The wordpress.org author is Justin Tadlock. We have recorded no ownership change.
What can I use instead of Query Posts?
Plugins in the same category with a higher Canary Score: Categorized Tag Cloud, Newpost Catch.