CVE-2025-8722
Published
CVSS v3
6.4
MEDIUM
CVSS v2
N/A
Affected
1
PROJECT
Description
The Content Views plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Grid and List widgets in all versions up to, and including, 4.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
<p>Content Views is the most popular grid plugin to create stunning Blogs, News, Personal, Portfolio, Business, and Shop sites.</p>
<p>Easy to display posts, pages, custom post types, images, and taxonomy terms in attractive grid, list, slider, accordion, pinterest, timeline, overlay, and more.</p>
<p>Show recent posts, category posts, tag posts, author posts, posts by keyword, posts by custom field, posts by date, etc. effortlessly.</p>
<p>Classic editor friendly & Gutenberg block editor ready & Elementor supported!</p>
<p><a href="https://contentviewspro.com/demo/?utm_source=wordpress&utm_medium=link&utm_campaign=readme" rel="nofollow ugc">See Live Demo</a> | <a href="https://contentviewspro.com/?utm_source=wordpress&utm_medium=link&utm_campaign=readme" rel="nofollow ugc">Content Views Pro</a> | <a href="https://contentviewspro.com/documentation/?utm_source=wordpress&utm_medium=link&utm_campaign=readme" rel="nofollow ugc">Documentation</a> | <a href="https://contentviewspro.com/contact/?utm_source=wordpress&utm_medium=link&utm_campaign=readme" rel="nofollow ugc">Support</a></p>
<h3>🏆 SHORTCODE FOR CLASSIC EDITOR AND PAGE BUILDERS</h3>
<p>Content Views provides a powerful shortcode feature to work with the Classic editor and page builders in 2 simple steps:</p>
<p><span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/QgQLjB0DQ8s?version=3&rel=0&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&cc_load_policy=1&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span></p>
<ul>
<li>
<p><strong>Step 1: Create a View</strong><br />
Start by creating a View where you can query and sort any posts, pages, custom post types by category, tag, taxonomy, custom field, post ID, post title, date, author, etc.<br />
You can select from 20 layouts that fit your needs, customize and style them with many options.<br />
You can also choose and import from our library of 76 stunning pre-made designs (<a href="https://contentviewspro.com/documentation/article/use-patterns-on-shortcode/?utm_source=wordpress&utm_medium=link&utm_campaign=readme" rel="nofollow ugc">read more</a>).</p>
</li>
<li>
<p><strong>Step 2: Add Shortcode</strong><br />
Add the created view shortcode to the Classic editor, page builder, widget, or anywhere you want to display your post grid.</p>
</li>
</ul>
<h3>🏆 BLOCKS & PATTERNS FOR BLOCK EDITOR</h3>
<p>Content Views extends the Block Editor with 16 advanced blocks and 76 prebuilt patterns to help you build WordPress websites faster and more professionally:</p>
<p><span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/4Mj55xrPtV8?version=3&rel=0&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&start=17&cc_load_policy=1&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span></p>
<h4>💎 16 GUTENBERG POST BLOCKS</h4>
<p>Content Views adds 16 amazing and feature-rich blocks to help you display WordPress posts, pages, custom post types stunningly. Using our awesome Gutenberg blocks plugin, you can build and show website content with endless customization options:</p>
<ul>
<li>Different blocks for different kinds of content/sections/websites</li>
<li>Various post block layouts to provide you more design choices</li>
<li>Advanced post query filters to control block content</li>
<li>Built-in responsive settings in blocks</li>
<li>Advanced typography settings</li>
<li>Google fonts supported in blocks</li>
</ul>
<h4>💎 76+ READY GUTENBERG BLOCK PATTERNS & TEMPLATES</h4>
<p>To save your time and help you to build faster in the WordPress Block editor, we created a collection of 76+ stunningly designed Gutenberg block patterns and templates that you can explore and import to the Block editor with just a few clicks. You can customize these post block patterns & templates easily in the way you want with numerous block options. You can use our pre-designed post block templates to build a complete page in just a few minutes. You also can combine the post block patterns in your own way to create unique design for your WordPress website.</p>
<h3>🏆 WIDGETS FOR ELEMENTOR PAGE BUILDER</h3>
<p>If you use the Elementor page builder, our plugin will enhance your Elementor experience with 16 advanced widgets for Elementor to showcase your posts, pages, custom post types, media files in stunning layouts (grid, list, slider, timeline, and many more).</p>
<p>Each of our widgets for Elementor is a different way to show your content. All widgets are fully customizable with many useful and friendly options (to control what to show, and how to show):</p>
<ul>
<li>Powerful query controls for each widget</li>
<li>Many layout and display options to completely control the output</li>
<li>Advanced style settings to customize typography, color, padding, border, etc.</li>
</ul>
<p>With our plugin, you can build websites with the Elementor page builder so much faster and easier.</p>
<p><span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/xaKZM9T794c?version=3&rel=0&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&cc_load_policy=1&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span></p>
<h3>🏆 TOP FEATURES</h3>
<h4>💎 MULTIPLE LAYOUTS FOR ANY KIND OF WEBSITES</h4>
<p>We provide various attractive & responsive layouts for different types of websites and purposes. Pick one from our beautiful grid, list, slider/carousel, pinterest, masonry, timeline, glossary, accordion layouts that fits your need, and then customize it as you want with many flexible settings and options.</p>
<p>Content Views is proud of helping bloggers, business/shop owners, companies, religious communities, universities, and government departments to show and build their WordPress websites content amazingly and efficiently.</p>
<h4>💎 POWERFUL QUERY FILTERS</h4>
<p>Our shortcodes/blocks/widgets provide many options to help you query, filter, search, and sort any posts, pages, custom post types easily.</p>
<ul>
<li><strong>Post Type</strong><br />
Select one or multiple post types in your website including post, page, custom post types, media/attachment.</li>
<li><strong>Taxonomy</strong><br />
Filter posts by categories, tags, custom taxonomy terms easily.</li>
<li><strong>Common</strong><br />
Include, exclude specific posts by post ID or post title. You also can set post offset, and amount of posts to show.</li>
<li><strong>Sort/order</strong><br />
By default, it sorts posts by published date to show recent posts or latest posts. You can change it to sort posts by modified date, post title, post ID, random order, menu order, and more.</li>
<li><strong>Filter posts by keyword</strong><br />
Easy to find your posts by custom keyword that appears in post title, post content, post excerpt.</li>
<li><strong>Filter posts by author</strong><br />
Find posts created by or not created by specific post authors and current logged-in author.</li>
<li><strong>Filter posts by status</strong><br />
Display published posts, scheduled posts, private posts, or posts with another status easily with this feature.</li>
<li><strong>Filter posts by published date</strong><br />
Display posts published today, yesterday, this week/month/year, within a custom date range.</li>
<li><strong>Filter Sticky Post (PRO)</strong><br />
Hide sticky posts, show them at top, or show only sticky posts.</li>
<li><strong>Restrict posts by membership (PRO)</strong><br />
Help you to show posts to only allowed members of membership plugins such as Members, MemberMouse…</li>
<li><strong>Filter posts by custom field (PRO)</strong><br />
Filter your posts by one or multiple custom fields easily & quickly. It supports ACF, Meta Box, and other custom field plugins.</li>
</ul>
<h4>💎 ADVANCED FRONT-END FILTER (PRO)</h4>
<p>If you are looking for a truly powerful front-end filter or faceted search for your website, then this feature is for you. You can help your website visitors to find any posts, pages, custom post types easily by showing category, tag, custom taxonomy, custom field as filtering options in various formats such as dropdowns, checkboxes, radios, date ranges, number sliders, buttons.</p>
<p>Also, you can show text search field, and sorting options by post date, post title, custom field. Furthermore, you can customize style of these filters, change their appearance order, etc. And you can show the filters above or beside the post grid.</p>
<p><a href="https://contentviewspro.com/demo/faceted-search-live-filter/?utm_source=wordpress&utm_medium=link&utm_campaign=readme" rel="nofollow ugc">See Front-End Filter Demo</a></p>
<h4>💎 AJAX & NORMAL PAGINATION</h4>
<p>Our plugin provides both normal and AJAX pagination. AJAX pagination will retrieve posts without reloading the page, using 3 different pagination styles including ajax numeric pagination, ajax load more, and ajax infinite scroll. It is easy to enable/disable pagination in our post grid.</p>
<p><a href="https://contentviewspro.com/demo/pagination/numbered-ajax/?utm_source=wordpress&utm_medium=link&utm_campaign=readme" rel="nofollow ugc">See Pagination Demo</a></p>
<h4>💎 REPLACE THEME LAYOUT (PRO)</h4>
<p>Our special Replace Layout feature will help you to display beautiful grid/another layout for posts on below WordPress pages easily, without changing the theme, and no coding required:</p>
<p>✔️ Blog page<br />
✔️ Category page<br />
✔️ Tag page<br />
✔️ Search page<br />
✔️ Author page<br />
✔️ Date page<br />
✔️ Taxonomy, term page</p>
<h4>💎 3RD-PARTY INTEGRATIONS & COMPATIBILITY</h4>
<p>Content Views seamlessly integrates with a wide range of plugins:</p>
<ul>
<li><strong>WooCommerce</strong>: show products in beautiful layouts. Easily filter products by price, categories, tags, attributes, visibility. And show sale, best-selling, featured, top-rated products with one single click (<a href="https://contentviewspro.com/demo/integration/woocommerce/?utm_source=wordpress&utm_medium=link&utm_campaign=readme" rel="nofollow ugc">see demo</a>).</li>
<li><strong>The Events Calendar</strong>: filter events by categories, tags, start/end date, etc. and show events & their information in grid/list easily (<a href="https://contentviewspro.com/demo/integration/the-events-calendar/?utm_source=wordpress&utm_medium=link&utm_campaign=readme" rel="nofollow ugc">see demo</a>).</li>
<li><strong>Advanced Custom Fields, Meta Box, Pods</strong>: filter posts by custom fields, and show custom field for each post in the post grid (<a href="https://contentviewspro.com/demo/integration/advanced-custom-fields/?utm_source=wordpress&utm_medium=link&utm_campaign=readme" rel="nofollow ugc">see demo</a>).</li>
<li><strong>WPML, Polylang</strong>: display translated posts, pages, custom posts, taxonomies, custom fields automatically in our layouts.</li>
<li><strong>Membership plugins</strong>: show posts to only allowed members of Members, Paid Memberships Pro, MemberPress…</li>
<li><strong>Yoast SEO, Rank Math</strong>: filter posts by primary category, and show only primary category as meta output in the post grid.</li>
</ul>
<h3>🏆 AND MANY MORE GREAT FEATURES</h3>
<p>Here are some other great features that Content Views offers:</p>
<ul>
<li>100% mobile-friendly shortcodes, blocks, and widgets</li>
<li>Complete control over block content, layout and style</li>
<li>Border, color, background, margin, padding settings</li>
<li>Change the html tag, length of post title in the post grid</li>
<li>Change post content/excerpt source, length</li>
<li>Change post image size, styles in shortcodes, blocks, and widgets</li>
<li>Lazy loading for images in the post grid</li>
<li>Show post comment count</li>
<li>Show post author name, avatar</li>
<li>Show post category, post tag, post taxonomy in custom position</li>
<li>Show post date in custom format</li>
<li>Post meta field selection, position and styling</li>
<li>Change the post link target attribute</li>
<li>Social sharing buttons for each post in the post grid</li>
<li>SEO and speed optimization for all shortcodes, blocks, and widgets</li>
<li>Display advertisements between posts in the post grid</li>
<li>Reusing the shortcode with extra parameters</li>
<li>Right to Left (RTL) support</li>
<li>Customizable output with many hooks</li>
</ul>
<h3>🏆 LIST OF SHORTCODE LAYOUTS, GUTENBERG BLOCKS, AND WIDGETS FOR ELEMENTOR</h3>
<p>All shortcodes/blocks/widgets support posts, pages, custom post types, media files and come with a lot of options to customize. Here is the key feature of each layout/block/widget:</p>
<ul>
<li><strong><a href="https://contentviewspro.com/demo/blocks/grid/?utm_source=wordpress&utm_medium=link&utm_campaign=readme" rel="nofollow ugc">Grid Post</a></strong> – This post grid displays your posts in a beautiful standard grid layout</li>
<li><strong><a href="https://contentviewspro.com/demo/blocks/list/?utm_source=wordpress&utm_medium=link&utm_campaign=readme" rel="nofollow ugc">List Post</a></strong> – This post list displays your posts in a list with post image on the left/right</li>
<li><strong><a href="https://contentviewspro.com/demo/blocks/pinterest/?utm_source=wordpress&utm_medium=link&utm_campaign=readme" rel="nofollow ugc">Pinterest</a></strong> – This post layout displays your posts in a modern stacking grid that looks like Pinterest.com</li>
<li><strong><a href="https://contentviewspro.com/demo/blocks/collapsible/?utm_source=wordpress&utm_medium=link&utm_campaign=readme" rel="nofollow ugc">Collapsible Post</a></strong> – This post layout displays your posts in a layout that can expand or collapse post content. It is a perfect choice for FAQ page or a narrow section</li>
<li><strong><a href="https://contentviewspro.com/demo/blocks/scrollable/?utm_source=wordpress&utm_medium=link&utm_campaign=readme" rel="nofollow ugc">Scrollable Post</a></strong> – This post layout displays your posts in a carousel/slider layout with navigation, indicator and autoplay to explore more posts easily</li>
<li><strong><a href="https://contentviewspro.com/demo/blocks/timeline/?utm_source=wordpress&utm_medium=link&utm_campaign=readme" rel="nofollow ugc">Timeline</a></strong> – This post layout displays your posts in a classic Timeline layout like Facebook</li>
<li><strong><a href="https://contentviewspro.com/demo/blocks/big-post-1/?utm_source=wordpress&utm_medium=link&utm_campaign=readme" rel="nofollow ugc">Big Post 1</a></strong> – This post layout displays one big post above other small posts. Big post and small posts can be customized separately</li>
<li><strong><a href="https://contentviewspro.com/demo/blocks/big-post-2/?utm_source=wordpress&utm_medium=link&utm_campaign=readme" rel="nofollow ugc">Big Post 2</a></strong> – This post layout displays one big post beside other small posts. Big post and small posts can be customized separately</li>
<li><strong><a href="https://contentviewspro.com/demo/blocks/overlay-1/?utm_source=wordpress&utm_medium=link&utm_campaign=readme" rel="nofollow ugc">Post Overlay 1</a></strong> – This post grid displays a beautiful grid layout with overlay over post image</li>
<li><strong><a href="https://contentviewspro.com/demo/blocks/overlay-2/?utm_source=wordpress&utm_medium=link&utm_campaign=readme" rel="nofollow ugc">Post Overlay 2</a></strong> – This custom post grid has one post showing beside other stacked posts, and overlay enabled</li>
<li><strong><a href="https://contentviewspro.com/demo/blocks/overlay-3/?utm_source=wordpress&utm_medium=link&utm_campaign=readme" rel="nofollow ugc">Post Overlay 3</a></strong> – This advanced post grid displays one post beside 3 other posts (shown in 2 rows), with text overlay</li>
<li><strong><a href="https://contentviewspro.com/demo/blocks/overlay-4/?utm_source=wordpress&utm_medium=link&utm_campaign=readme" rel="nofollow ugc">Post Overlay 4</a></strong> – This post grid shows one post next to 3 other posts (shown in 2 columns), and overlay for image</li>
<li><strong><a href="https://contentviewspro.com/demo/blocks/overlay-5/?utm_source=wordpress&utm_medium=link&utm_campaign=readme" rel="nofollow ugc">Post Overlay 5</a></strong> – This new post grid has one post beside 4 other posts (shown in a 2×2 grid), with overlay enabled</li>
<li><strong><a href="https://contentviewspro.com/demo/blocks/overlay-6/?utm_source=wordpress&utm_medium=link&utm_campaign=readme" rel="nofollow ugc">Post Overlay 6</a></strong> – This custom post grid shows one post above other posts (shown in columns), with overlay on image</li>
<li><strong><a href="https://contentviewspro.com/demo/blocks/overlay-7/?utm_source=wordpress&utm_medium=link&utm_campaign=readme" rel="nofollow ugc">Post Overlay 7</a></strong> – This post grid has one post next to & above other posts, and overlay over the image</li>
<li><strong><a href="https://contentviewspro.com/demo/blocks/overlay-8/?utm_source=wordpress&utm_medium=link&utm_campaign=readme" rel="nofollow ugc">Post Overlay 8</a></strong> – This modern post grid shows 2 posts and 4 other posts in an advanced grid, with text overlay</li>
</ul>