Skip to content
PluginCanary

Post Grid Blocks & Templates for News, Magazine, & Blog Sites - PostX

unknown active installs · Checked 3 Nov 2026
Avoid3 Warnings

Avoid: Post Grid Blocks & Templates for News, Magazine, & Blog Sites - PostX is closed on wordpress.org and no longer gets updates.

10/ 100 Canary Score

Capped at 10 because the plugin is closed.

Sub-scores for Post Grid Blocks & Templates for News, Magazine, & Blog Sites - PostX
Ownership100
Maintenance10
Security60
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningCLS-1Closed on wordpress.org on 10 Oct 2026, reason: false. Replace this plugin. It no longer receives updates from wordpress.org.10 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 9 Oct 2026, fixed in 5.1.1. Update to version 5.1.1 or later.9 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 21 Sep 2026, fixed in 5.0.41. Update to version 5.0.41 or later.21 Sep 2026Evidence
  • InfoSEC-315 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
wpxpo1 Nov 2026 to 4 Nov 2026, 2 commits

1 committer recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
unknown
Releases, 24 months
0
Tested up to
unknown vs 7.1
Requires PHP
not stated supported 8.2+

Release history builds as we see new versions.

Support

Support history appears after our first snapshots of the forum counts.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
9 Oct 2026Post Grid Gutenberg Blocks <= 5.1.0 - Unauthenticated Stored Cross-Site Scripting via display_name User Field7.2<= 5.1.05.1.1n/a
21 Sep 2026PostX <= 5.0.40 - Unauthenticated Information Exposure5.3<= 5.0.405.0.41n/a
5 Aug 2026PostX <= 5.0.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Comments Block6.4<= 5.0.135.0.14n/a
23 Jul 2026Post Grid Gutenberg Blocks <= 5.0.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'searchnoresult' Block Attribute6.4<= 5.0.325.0.33n/a
8 Jul 2026Post Grid Gutenberg Blocks for News, Magazines, Blog Websites <= 5.0.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'moreResultsText' Block Attribute6.4<= 5.0.315.0.32n/a
15 Apr 2026Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX <= 5.0.5 - Missing Authorization to Limited Post Meta Modification5.3<= 5.0.55.0.6n/a
3 Mar 2026PostX <= 5.0.8 - Authenticated (Administrator+) Server-Side Request Forgery via REST API Endpoints7.2<= 5.0.85.0.9n/a
19 Jan 2026PostX <= 5.0.3 - Missing Authorization5.3<= 5.0.35.0.4n/a
21 Dec 2025PostX <= 5.0.3 - Unauthenticated Information Exposure5.3<= 5.0.35.0.4n/a
20 Dec 2025Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX <= 5.0.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure7.5<= 5.0.35.0.4n/a
2 Sep 2025PostX <= 4.1.36 - Missing Authorization4.3<= 4.1.364.1.37n/a
29 Aug 2025PostX <= 4.1.35 - Authenticated (Editor+) Privilege Escalation7.2<= 4.1.354.1.36n/a
28 Mar 2025PostX <= 4.1.25 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 4.1.254.1.26n/a
2 Dec 2024PostX <= 4.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 4.1.154.1.16n/a
15 Nov 2024PostX <= 4.1.16 - Missing Authorization to Arbitrary Plugin Installation/Activation8.8<= 4.1.164.1.17n/a
28 Oct 2024PostX <= 4.1.15 - Authenticated (Author+) Stored Cross-Site Scripting6.4<= 4.1.154.1.16n/a
24 Oct 2024PostX <= 4.1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 4.1.124.1.13n/a
29 May 2024Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX <= 4.1.1 - Authenticated (Author+) Stored Cross-Site Scripting6.4<= 4.1.14.1.2n/a
29 May 2024Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX <= 4.1.2 - Missing Authorization to Arbitrary Options Update8.8<= 4.1.24.1.3n/a
27 May 2024Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX <= 4.0.4 - Authenticated (Contributor+) Stored Cross=Site Scripting6.4<= 4.0.44.1.0n/a
22 Apr 2024Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX <= 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 4.0.14.0.2n/a
16 Apr 2024Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX <= 4.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 4.0.14.0.2n/a
5 Apr 2024PostX – Gutenberg Blocks for Post Grid <= 3.2.3 - Incorrect Authorization4.3<= 3.2.33.2.4n/a
2 Aug 2023PostX - Gutenberg Post Grid Blocks <= 3.0.5 - Reflected Cross-Site Scripting via 'postx_type'6.1<= 3.0.53.0.6n/a
23 Jun 2023PostX – Gutenberg Blocks for Post Grid <= 2.9.9 - Unauthenticated Cross-Site Scripting7.2<= 2.9.92.9.10n/a

Source: Wordfence Intelligence.

Reputation

No ratings yet.

Momentum

unknown active installs. History builds with each weekly snapshot.

Momentum history builds with each snapshot.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

YMC FilterScore 96 · 4,000+Block Visibility - Conditional Visibility Control for the Block EditorScore 93 · 40,000+Gmap BlockScore 93 · 10,000+OrphansScore 92 · 50,000+Black Studio TinyMCE WidgetScore 91 · 200,000+

Facts

Versionnot stated
Authornot stated
Addednot stated
Last updatednot stated
Active installsunknown
Requires WordPressnot stated
Tested up tonot stated
Requires PHPnot stated
CategoryContent Management > Blog & Article Publishing
Tagsnot stated

Questions

Is Post Grid Blocks & Templates for News, Magazine, & Blog Sites - PostX still maintained?

No. Post Grid Blocks & Templates for News, Magazine, & Blog Sites - PostX was closed on wordpress.org on 10 Oct 2026 (false) and gets no updates there.

Is Post Grid Blocks & Templates for News, Magazine, & Blog Sites - PostX safe?

Post Grid Blocks & Templates for News, Magazine, & Blog Sites - PostX has no open unpatched vulnerabilities on record. 15 vulnerabilities were published in the last 24 months. Its Canary status is Avoid.

Who owns Post Grid Blocks & Templates for News, Magazine, & Blog Sites - PostX?

The wordpress.org author is not listed. Recent committers: wpxpo. We have recorded no ownership change.

What can I use instead of Post Grid Blocks & Templates for News, Magazine, & Blog Sites - PostX?

Plugins in the same category with a higher Canary Score: YMC Filter, Block Visibility - Conditional Visibility Control for the Block Editor, Gmap Block, Orphans, Black Studio TinyMCE Widget.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue