Post Grid

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 64% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A declining trend compresses what a buyer would pay.

1. ★★★★★ bloos

   1.9y ago

   II am very satisfied with the purchase of Combo Blocks. I had to make something complicated with accordions within accordions for one of my clients and this was in included at Combo Blocks. But they were still developing it and it was a bit of a search for the right shape and form. But Azizul Raju from Comby Blocks gave me very good support with always a quick reply. Perfect thinking along the way with me. Really spendid! So Combo Blocks comes highly recommended!

   Read on wp.org ↗
2. ★★★★★ Nayon Islam

   1.9y ago

   I recently started using ComboBlocks, formerly known as Post Grid, and I’m really impressed! This plugin has made it much easier to create and organize content on my website. What I love most is how it solves common issues with styling and features in the Gutenberg editor. The interface is user-friendly, allowing me to customize and showcase my posts in an attractive grid layout effortlessly. Overall, ComboBlocks is a fantastic tool that enhances both the functionality and appearance of my WordPress site. I highly recommend it.

   Read on wp.org ↗
3. ★★★★★ SharperApex

   2.1y ago

   I purchased the Pro version of the ComboBlocks plugin to get the Post Tags functionality, but it didn’t work. The implementation was chaotic as the documentation was terribly inadequate. Initially the dev wrote back and gave very cryptic advice, none of which worked. I explained that I use Elementor Pro and he admitted his plugin didn’t work on that platform, but urged me to wait for him to fix that. He then claimed he fixed it, but it did not work. It never worked on my posts, and he stopped responding to my support requests, even when I sent in screenshots of what I was seeing. I’ve had to file a complaint with my credit card company because this plugin was a huge waste of my money and time, didn’t work as advertised, and his support was terribly lacking, especially when he quit responding. DO NOT WASTE YOUR TIME WITH THIS ALPHA LEVEL SOFTWARE.

   Read on wp.org ↗
4. ★★★★★ queeneve

   2.5y ago

   what the hell is this mess, i couldnot even understand how it works dont waste your time with it

   Read on wp.org ↗
5. ★★★★★ Big Geek Daddy

   2.6y ago

   Needed a replacement for sharing other posts after AddThis stop proving their services. Combo Blocks works great once you figure it out. It’s not the most intuitive UI but they have great support to answer questions and point you in the right direction. This topic was modified 2 years, 5 months ago by Big Geek Daddy.

   Read on wp.org ↗
6. ★★★★★ Jeroen

   2.7y ago

   In the past weeks I have had 2 issues with PostGrid Combo. Azizul has provided overnight solutions in both cases. What a support and what a service. Keep up the great work fellows!

   Read on wp.org ↗
7. ★★★★★ umdiecker

   2.8y ago

   Thanks for the support on setup of this with ACF.

   Read on wp.org ↗
8. ★★★★★ sureshiyengar

   3.4y ago

   I’m delighted with the Post Grid Combo plugin for WordPress. Even with the free version, it has lifted the appearance of the Blog page on my site. It offers many choices to customize the appearance. I’d recommend adding the ability for automatic excerpts. It could take it to the next level in Blog summary.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 2.3.24 2026-07-19 – fixed – Cross Site Scripting (XSS) 2.3.24
2. — Version 2.3.23 2026-01-13 – fixed – Extra content under grid loop issue fixed 2.3.23
3. — Version 2.3.22 2026-01-11 – fixed – admin broken issue fixed 2026-01-11 – fixed – Builder template library issue fixed 2.3.22
4. — Version 2.3.21 2025-12-24 – fixed – Remote file URL removed 2025-12-24 – fixed – Local file URL removed 2025-12-24 – fixed – mixitup.js removed due to GPL issue 2025-12-24 – fixed – Output Escaping issue fixed 2025-12-24 – fixed – Inpu 2.3.21
5. — Version 2.3.20 2025-12-18 – fixed – Escaping issue fixed 2025-12-18 – update – Builder view css load optimized 2.3.20
6. — Version 2.3.19 2025-11-26 – fixed – Fixed builder template library URL issue fixed 2025-11-26 – fixed – Loading builder templates issue fixed. 2.3.19

29 disclosed vulnerabilities on record for this plugin, 2 still affect the current version.

1. Medium · 6.4 Post Grid and Gutenberg Blocks <= 2.3.21 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-12-21 CVE-2025-68605 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.3.21 No patch available
2. Medium · 5.3 Post Grid and Gutenberg Blocks <= 2.3.19 - Unauthenticated Insecure Direct Object Reference ↗
   2025-12-03 CVE-2025-63043 Authorization Bypass Through User-Controlled Key Affects <= 2.3.19 No patch available
3. Medium · 4.3 Post Grid and Gutenberg Blocks <= 2.3.17 - Missing Authorization ↗
   2025-10-04 CVE-2025-62924 Missing Authorization Affects <= 2.3.17 Patched in 2.3.18
4. Medium · 4.3 Post Grid and Gutenberg Blocks <= 2.3.17 - Missing Authorization ↗
   2025-10-04 CVE-2025-66058 Missing Authorization Affects <= 2.3.17 Patched in 2.3.18
5. High · 8.8 Post Grid and Gutenberg Blocks <= 2.3.11 - Authenticated (Contributor+) PHP Object Injection ↗
   2025-08-06 CVE-2025-54007 Deserialization of Untrusted Data Affects <= 2.3.11 Patched in 2.3.12
6. Medium · 5.3 Post Grid and Gutenberg Blocks – ComboBlocks <= 2.3.6 - Unauthenticated User Information Exposure ↗
   2025-02-27 CVE-2024-13796 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 2.3.6 Patched in 2.3.7
7. Medium · 5.3 Post Grid and Gutenberg Blocks – ComboBlocks <= 2.3.5 - Unauthenticated Paid Order Creation ↗
   2025-02-21 CVE-2024-13798 Improper Input Validation Affects <= 2.3.5 Patched in 2.3.6
8. Critical · 9.8 Post Grid and Gutenberg Blocks 2.2.85 - 2.3.3 - Unauthenticated Privilege Escalation ↗
   2025-01-14 CVE-2024-9636 Improper Privilege Management Affects 2.2.85 - 2.3.3 Patched in 2.3.4
9. Medium · 6.4 Post Grid and Gutenberg Blocks <= 2.2.92 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-01-14 CVE-2024-9645 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.2.92 Patched in 2.2.93
10. Medium · 6.4 Post Grid and Gutenberg Blocks <= 2.2.93 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-10-24 CVE-2024-50432 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.2.93 Patched in 2.2.94
11. Medium · 6.4 Post Grid and Gutenberg Blocks <= 2.2.89 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-09-27 CVE-2024-47340 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.2.89 Patched in 2.2.90
12. High · 8.8 Post Grid and Gutenberg Blocks 2.2.87 - 2.2.90 - Authenticated (Subscriber+) Privilege Escalation ↗
    2024-09-10 CVE-2024-8253 Incorrect Privilege Assignment Affects 2.2.87 - 2.2.90 Patched in 2.2.91
13. Medium · 6.4 Gutenberg Blocks, Page Builder – ComboBlocks <= 2.2.87 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Block ↗
    2024-08-13 CVE-2024-7588 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.2.84 Patched in 2.2.88
14. Medium · 6.4 ComboBlocks <= 2.2.86 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-08-07 CVE-2024-43155 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.2.86 Patched in 2.2.87
15. Medium · 6.4 Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.85 - Authenticated (Contributor+) Stored Cross-Site Scripting via redirectURL Parameter of Date Countdown Widget ↗
    2024-07-31 CVE-2024-6346 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.2.85 Patched in 2.2.86
16. Medium · 6.4 Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel - Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attribute ↗
    2024-06-06 CVE-2024-4042 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.2.80 Patched in 2.2.81
17. Medium · 6.4 Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-06-06 CVE-2024-1988 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.2.80 Patched in 2.2.81
18. Medium · 6.4 Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-05-20 CVE-2024-3155 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.2.80 Patched in 2.2.81
19. Medium · 5.3 Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.78 - Unauthenticated Sensitive Information Exposure ↗
    2024-04-22 CVE-2024-32816 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 2.2.78 Patched in 2.2.79
20. Medium · 6.1 Post Grid <= 2.2.74 - Reflected Cross-Site Scripting ↗
    2024-03-28 CVE-2024-30441 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.2.74 Patched in 2.2.76
21. Medium · 5.3 Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel <= 2.2.74 - Information Exposure ↗
    2024-03-19 CVE-2024-0881 Improper Access Control Affects <= 2.2.74 Patched in 2.2.76
22. High · 7.5 Post Grid Combo – 36+ Gutenberg Blocks <= 2.2.68 - Information Exposure via get_posts API Endpoint ↗
    2024-03-12 CVE-2023-7072 Exposure of Sensitive Information Through Data Queries Affects <= 2.2.68 Patched in 2.2.69
23. Medium · 6.4 Post Grid Combo – 36+ Gutenberg Blocks <= 2.2.64 - Authenticated (Contributor+) Cross-Site Scripting ↗
    2023-12-15 CVE-2023-6645 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.2.64 Patched in 2.2.65
24. High · 7.5 Post Grid <= 2.2.50 - Missing Authorization to Sensitive Information Exposure via REST API ↗
    2023-08-11 CVE-2023-40211 Missing Authorization Affects <= 2.2.50 Patched in 2.2.51
25. Medium · 6.1 Post Grid <= 2.1.15 - Cross-Site Scripting ↗
    2022-03-15 CVE-2021-24986 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 2.1.16 Patched in 2.1.16
26. Medium · 6.1 Post Grid < 2.1.16 - Reflected Cross-Site Scripting ↗
    2022-03-15 CVE-2022-0447 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 2.1.16 Patched in 2.1.16
27. High · 8.8 Post Grid <= 2.1.12 - Contributor+ SQL Injection ↗
    2021-12-15 CVE-2021-4450 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects < 2.1.13 Patched in 2.1.13
28. Medium · 6.1 Post Grid <= 2.1.7 - Reflected Cross-Site Scripting ↗
    2021-06-28 CVE-2021-24488 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 2.1.7 Patched in 2.1.8
29. Critical · 9.1 Post Grid <= 2.0.12 - Arbitrary File Deletion ↗
    2016-11-08 External Control of File Name or Path Affects <= 2.0.12 Patched in 2.0.13

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 10 languages, 0 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-03-30 40K+ → 30K+ down after 1 days in tier
2. 2025-03-29 30K+ → 40K+ up after 1 days in tier
3. 2025-03-28 40K+ → 30K+ down after 2 days in tier
4. 2025-03-26 30K+ → 40K+ up after 1 days in tier
5. 2025-03-25 40K+ → 30K+ down after 367 days in tier
6. 2024-03-23 50K+ → 40K+ down after 409 days in tier
7. 2023-02-08 60K+ → 50K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Content Views – Post Grid & Filter (Shortcode, Blocks, Elementor Widgets) 100K+ installs · 4.8★ · 2 shared tags A
• Advanced Post Block – Display Your Posts Exactly How You Want 10K+ installs · 4.1★ · 2 shared tags B
• Carousel Horizontal Posts Content Slider 2K+ installs · 4.1★ · 2 shared tags C
• Post Grid & Post Slider – Carousel, Filter Tabs & Related Posts 1K+ installs · 4.0★ · 2 shared tags B
• Hero Posts Lite 300+ installs · 3.6★ · 2 shared tags C
• Fancy Post Grid – Ultimate Post Grid Builder 200+ installs · 4.0★ · 2 shared tags B

Embed this report card

Drop a live Pulse card for Post Grid into a readme, a review or a deck. It updates itself.

Post Grid: 30K+ active installs, 4.3★ (163 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/post-grid