Content ordering plugins turn drag-and-drop administrator actions into persistent changes across posts, pages, taxonomies, and sites. Those updates must be limited to authorized objects and protected from forged requests. Intuitive Custom Post Order version 3.2.0 has successfully completed the CleanTalk Plugin Security Certification process and received PSC-2026-64683, confirming that the plugin was reviewed from a secure code perspective with attention to reorder permissions, request integrity, object identifiers, taxonomy operations, multisite scope, and stored ordering data.
| Name of | Intuitive Custom Post Order |
| Version | 3.2.0 |
| Active installations | 400,000+ |
| Description | Adds drag-and-drop ordering for posts, pages, custom post types, taxonomies, and multisite content. |
| Security | Successfully tested for: SQL Injection (SQLi) Cross-Site Scripting (XSS) – Stored and Reflected Cross-Site Request Forgery (CSRF) Authentication Vulnerabilities Authentication Bypass Exploits Privilege Escalation Buffer Overflow Denial-of-Service (DoS) vectors Data Leakage Vulnerabilities Insecure Dependency Usage Remote Code Execution (RCE) Risks Unauthorized File Access Insufficient Injection Protection Information Disclosure via Misconfigured Endpoints |
| CleanTalk Certification | Proudly earned the “Plugin Security Certification” (PSC) from CleanTalk, indicating adherence to stringent security standards. |
| Additional Information | Use Intuitive Custom Post Order with confidence backed by the “Plugin Security Certification” (PSC). Grant ordering access only to trusted roles and verify custom queries continue to respect the intended content order. |
| Plugin Security Certification by CleanTalk |  |
| Logo of the plugin |  |
PSC by CleantalkJoin the community of developers who prioritize security. Highlight your plugin in the WordPress catalog.
Key Features
Intuitive Custom Post Order adds a drag-and-drop interface for reordering WordPress content in the administrator area. It supports posts, pages, custom post types, taxonomies, and multisite use cases. Reorder actions send object identifiers and new positions to the server, where the result is stored and later applied to content queries.
Security Assurance
The CleanTalk Plugin Security Certification evaluation examined capability checks for reorder actions, request nonce enforcement, validation of object and taxonomy identifiers, and safe persistence of ordering values. The review also considered cross-site scope in multisite, unauthorized changes to content order, administrative request handling, and query behavior around stored positions.
The plugin has been successfully tested for:
✅ Information Leakage Vulnerabilities
✅ SQL Injection Vulnerabilities
✅ Cross-Site Scripting (XSS) Attacks
✅ Cross-Site Request Forgery (CSRF) Attacks
✅ Authentication and Authentication Bypass Vulnerabilities
✅ Privilege Escalation Vulnerabilities
✅ Buffer Overflow Vulnerabilities
✅ Denial-of-Service (DoS) Vulnerabilities
✅ Data Leakage Vulnerabilities
✅ Insecure Dependencies
✅ Code Execution Vulnerabilities
✅ File Unauthorized Access Vulnerabilities
✅ Insufficient Injection Protection
Conclusion
With PSC-2026-64683, Intuitive Custom Post Order version 3.2.0 demonstrates strong baseline security for administrator-driven content ordering. The certification covers permissions, forged request resistance, object validation, stored positions, and multisite boundaries. Administrators should restrict ordering controls to roles that already manage the affected content and review custom queries after changing sort behavior.
Note: The date and certification information may change over time. It is advisable to verify the latest details on the plugin developer’s website.
