PLUGIN SECURITY
Is Content Views Query And Display Post Page safe?
Easy to show posts, pages, custom posts in customizable grid, list, slider, accordion... Available as Widgets (for Elementor), Shortcode, and Blocks.
What this plugin does
- Slug:
content-views-query-and-display-post-page - Author: Content Views
- 100000+ active installs
- 96/100 rating (333 reviews on wordpress.org)
- 5339357 all-time downloads
- On WordPress.org since 2014-05-28
blockcategory filterelementorpost filterpost grid
Maintenance status
- Latest known version: 4.5.1
- Last updated: 2026-08-20 4:47am GMT
- Tested up to WordPress: 7.1
- Requires PHP: 5.6+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
5 known CVEs on file for Content Views Query And Display Post Page.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-15361 | Content Views – Post Grid & Filter (Shortcode, Blocks, Elementor Widgets) [content-views-query-and-display-post-page] < 4.5 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | Unknown | < 4.5 | 4.5 | 2026-08-03 | ✓ fixed in latest |
| CVE-2024-4446 | Content Views – Post Grid & Filter (Shortcode, Blocks, Elementor Widgets) [content-views-query-and-display-post-page] < 3.7.2 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.4 | < 3.7.2 | 3.7.2 | 2024-05-06 | ✓ fixed in latest |
| CVE-2024-3929 | Content Views – Post Grid & Filter (Shortcode, Blocks, Elementor Widgets) [content-views-query-and-display-post-page] < 3.7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.4 | < 3.7.1 | 3.7.1 | 2024-04-24 | ✓ fixed in latest |
| CVE-2024-0612 | Content Views – Post Grid & Filter (Shortcode, Blocks, Elementor Widgets) [content-views-query-and-display-post-page] < 3.6.3 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 4.8 | < 3.6.3 | 3.6.3 | 2024-01-22 | ✓ fixed in latest |
| — | Content Views – Post Grid & Filter (Shortcode, Blocks, Elementor Widgets) [content-views-query-and-display-post-page] < 4.2 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.4 | < 4.2 | 4.2 | 0000-00-00 | ✓ fixed in latest |
| CVE-2025-8722 | Content Views < 4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Grid and List Widgets | — | Unknown | < 4.2 | 4.2 | — | ✓ fixed in latest |
How to fix it
Keep Content Views Query And Display Post Page updated — 4.5.1 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Elementor Website Builder – more than just a page builder — 10000000+ active installs — 90/100 (7296)
- Ultimate Addons for Elementor – Widgets, Templates, WooCommerce & Header Footer Builder — 2000000+ active installs — 98/100 (2525) — max PHP 8.4
- Essential Addons for Elementor – Popular Elementor Templates & Widgets — 1000000+ active installs — 98/100 (4110) — max PHP 8.4
- Starter Templates – AI-Powered Templates for Elementor & Gutenberg — 1000000+ active installs — 98/100 (4745) — max PHP 8.4
- Premium Addons for Elementor – Elementor Templates, Widgets & MCP Tools — 600000+ active installs — 98/100 (1677) — max PHP 8.4
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.