Known vulnerabilities in CMS Tree Page View – Reorder Pages with a Drag-and-Drop Tree

See every page as a drag-and-drop tree. Reorder your site structure in seconds — then edit, add and search right there.

3Reported vulnerabilities

6.1Highest CVSS score

2.3.1Latest version

50,000+Active installs

What to do now

Update CMS Tree Page View – Reorder Pages with a Drag-and-Drop Tree to 1.6.8 or later. 3 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 3, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2012-1834	Medium 4.3	2.4%	0.8.8 and earlier 0.1 to 0.1 (inclusive) 0.1a to 0.1a (inclusive) 0.2 to 0.2 (inclusive) 0.3 to 0.3 (inclusive) 0.4 to 0.4 (inclusive) 0.4.1 to 0.4.1 (inclusive) 0.4.2 to 0.4.2 (inclusive) 0.4.3 to 0.4.3 (inclusive) 0.4.4 to 0.4.4 (inclusive) 0.4.5 to 0.4.5 (inclusive) 0.4.6 to 0.4.6 (inclusive) 0.4.7 to 0.4.7 (inclusive) 0.4.8 to 0.4.8 (inclusive) 0.4.9 to 0.4.9 (inclusive) 0.5 to 0.5 (inclusive) 0.5.1 to 0.5.1 (inclusive) 0.5.2 to 0.5.2 (inclusive) 0.5.3 to 0.5.3 (inclusive) 0.5.4 to 0.5.4 (inclusive) 0.5.5 to 0.5.5 (inclusive) 0.5.6 to 0.5.6 (inclusive) 0.5.7 to 0.5.7 (inclusive) 0.6 to 0.6 (inclusive) 0.6.1 to 0.6.1 (inclusive) 0.6.2 to 0.6.2 (inclusive) 0.6.3 to 0.6.3 (inclusive) 0.7 to 0.7 (inclusive) 0.7.1 to 0.7.1 (inclusive) 0.7.2 to 0.7.2 (inclusive) 0.7.3 to 0.7.3 (inclusive) 0.7.4 to 0.7.4 (inclusive) 0.7.5 to 0.7.5 (inclusive) 0.7.6 to 0.7.6 (inclusive) 0.7.7 to 0.7.7 (inclusive) 0.7.8 to 0.7.8 (inclusive) 0.7.9 to 0.7.9 (inclusive) 0.7.10 to 0.7.10 (inclusive) 0.7.11 to 0.7.11 (inclusive) 0.7.12 to 0.7.12 (inclusive) 0.7.13 to 0.7.13 (inclusive) 0.7.14 to 0.7.14 (inclusive) 0.7.15 to 0.7.15 (inclusive) 0.7.16 to 0.7.16 (inclusive) 0.7.17 to 0.7.17 (inclusive) 0.7.18 to 0.7.18 (inclusive) 0.7.19 to 0.7.19 (inclusive) 0.7.20 to 0.7.20 (inclusive) 0.8 to 0.8 (inclusive) 0.8.1 to 0.8.1 (inclusive) 0.8.2 to 0.8.2 (inclusive) 0.8.3 to 0.8.3 (inclusive) 0.8.4 to 0.8.4 (inclusive) 0.8.5 to 0.8.5 (inclusive) 0.8.6 to 0.8.6 (inclusive) 0.8.7 to 0.8.7 (inclusive)	`0.8.9`	April 7, 2014
CVE-2023-30868	Medium 6.1	4.0%	Before 1.6.8	`1.6.8`	April 20, 2023
WF-13d16955-056d-45c5-b0d1-891767e866b2	Medium 4.3	—	Before 1.4	`1.4`	October 20, 2017

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.