Collapsing Archives

Collapsing Archives has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; all 2 are fixed as of September 2026. Their average CVSS score is 6.5, and the most serious one scores 6.5 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include SQL Injection.

Every one of the 2 issues recorded for Collapsing Archives has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Collapsing Archives is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium

6.5/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Collapsing Archives vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.5CVE-2026-32365

Collapsing Archives <= 3.0.7 - Authenticated (Contributor+) SQL Injection

Read the full analysis

Vulnerability Records

2 records


2026-02-16 00:00	Collapsing Archives <= 3.0.7 - Authenticated (Contributor+) SQL Injection Collapsing Archives <= 3.0.7	`CVE-2026-32365`	6.5 Medium	Doan Dinh Van (d52v)	Yes
2024-08-26 00:00	Collapsing Archives <= 3.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting Collapsing Archives <= 3.0.5	`CVE-2024-43934`	6.4 Medium	Ngô Thiên An (ancorn_)	Yes

Showing 1–2 of 2 reports

Latestv3.0.8

Collapsing Archives

Author

robfelty

4.1(21)

82/100

Last Updated

2026-02-12 (7mo ago)

Active Installs

3,000+

Downloads

149,632

Requires WP

2.8+

Requires PHP

Tested up to

WP 6.9.7

Created

2008-01-07 (19y ago)

Create collapsible archives by year or month. Features include: link to archive pages, display of individual posts and support for custom post-types. Demo I use this plugin in my blog at http://blog.robfelty.com

View on WordPress.org