Content Blocks (Custom Post Widget)

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 55% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A declining trend compresses what a buyer would pay.

1. ★★★★★ becaneweb

   12mo ago

   thanks, good job !

   Read on wp.org ↗
2. ★★★★★ Anonymous User

   1.8y ago

   Brilliantly useful plugin.

   Read on wp.org ↗
3. ★★★★★ Henrik

   2.0y ago

   Easy use, brilliant plugin

   Read on wp.org ↗
4. ★★★★★ jbleys

   2.8y ago

   Out of the box this tool is great to manage content. But the ability to use your own template part is where its versatility shines and allows for endless possibilities. Thanks for a great plugin.

   Read on wp.org ↗
5. ★★★★★ ghartwig

   3.1y ago

   I can finally have canned text and place it on more than one page without having to duplicate it. Great for temporary notices, or any reused text.

   Read on wp.org ↗
6. ★★★★★ sw38

   3.3y ago

   I can use this plugin with Elementor. Very good!

   Read on wp.org ↗
7. ★★★★★ bdgtc

   3.5y ago

   An essential tool for our website. This is so useful it should be a standard on every WordPress site. Easy to use and works perfectly every time.

   Read on wp.org ↗
8. ★★★★★ stephenm

   4.1y ago

   Great plugin out of the box.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 3.4.3 Fixed PHP 8+ fatal errors when a widget references a deleted content block or a shortcode references a missing template. Missing templates now fall back to the standard shortcode output. 3.4.3
2. — Version 3.4.2 WP 7.0 compatibility tested and confirmed 3.4.2
3. — Version 3.4.1 Security fix: Added allowlist validation for the shortcode markup attribute to prevent XSS attacks (CVE-2026-0894). 3.4.1
4. — Version 3.3.9 WP 6.9 compatibility tested and confirmed 3.3.9
5. — Version 3.3.8 WP 6.8 compatibility tested and confirmed 3.3.8
6. — Version 3.3.7 WP 6.7 compatibility tested and confirmed 3.3.7

6 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 6.4 Content Blocks (Custom Post Widget) <= 3.3.9 - Authenticated (Author+) Stored Cross-Site Scripting via content_block Shortcode ↗
   2026-04-17 CVE-2026-0894 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.3.9 Patched in 3.4.1
2. Medium · 6.4 Content Blocks (Custom Post Widget) <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via content Parameter ↗
   2025-02-19 CVE-2024-6432 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.3.5 Patched in 3.3.6
3. Medium · 6.4 Content Blocks (Custom Post Widget) <= 3.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2024-09-05 CVE-2024-44051 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.3.5 Patched in 3.3.6
4. Medium · 6.4 Content Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via content_block Shortcode ↗
   2024-05-31 CVE-2024-3565 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.3.0 Patched in 3.3.1
5. High · 8.8 Content Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode ↗
   2024-05-31 CVE-2024-3564 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') Affects <= 3.3.0 Patched in 3.3.1
6. Medium · 6.4 Content Blocks (Custom Post Widget) <= 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2024-05-07 CVE-2024-34566 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.3.0 Patched in 3.3.1

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 115 languages, 2 at 90% or more

Plus 91 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-01-09 20K+ → 10K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Donations via PayPal 20K+ installs · 4.4★ · 2 shared tags A
• Reusable Blocks Extended 20K+ installs · 4.6★ · 2 shared tags B
• Kaya QR Code Generator 10K+ installs · 4.3★ · 2 shared tags A
• HTML Page Sitemap (Block and Shortcode) 10K+ installs · 4.2★ · 2 shared tags A
• Shortcode Widget 10K+ installs · 4.6★ · 2 shared tags A
• Shortcode Redirect 10K+ installs · 4.2★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for Content Blocks (Custom Post Widget) into a readme, a review or a deck. It updates itself.

Content Blocks (Custom Post Widget): 10K+ active installs, 4.9★ (80 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/custom-post-widget