Simple Yearly Archive

Simple Yearly Archive has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 2 are fixed as of September 2026. Their average CVSS score is 5.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

Every one of the 2 issues recorded for Simple Yearly Archive has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Simple Yearly Archive is installed on roughly 6,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
5.4/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Simple Yearly Archive vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2026-7441

Simple Yearly Archive <= 2.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records
Simple Yearly Archive banner
Latestv2.2.7

Simple Yearly Archive

wpseek

Author

wpseek

4.7(30)
94/100
Last Updated
2026-08-15 (29d ago)
Active Installs
6,000+
Downloads
205,225
Requires WP
3.7+
Requires PHP
7.4+
Tested up to
WP 7.1
Created
2008-04-04 (19y ago)

Simple Yearly Archive is a rather neat and simple WordPress plugin that allows you to display your archives in a year-based list. It works mostly like the usual WP archive, but displays all published posts seperated by their year of publication. That said, it’s also possible to restrict the output to certain categories, and much more. See Usage for examples, available parameters and more. Included languages: English German (de_DE) (Thanks to me ;-)) German (de_DE_formal) (Thanks for contributing formal german language goes to Paul Vogel) Italian (it_IT) (Thanks for contributing italian language goes to Gianni Diurno) Russian (ru_RU) (Thanks for contributing russian language goes to Dimitry German) Belorussian (by_BY) (Thanks for contributing belorussian language goes to Marcis Gasuns) Uzbek (uz_UZ) (Thanks for contributing uzbek language goes to Alexandra Bolshova) French (fr_FR) (Thanks for contributing french language goes to Jean-Michel Meyer) Chinese (zh_CN) (Thanks for contributing chinese language goes to Mariana Ma) Japanese (ja) (Thanks for contributing japanese language goes to Chestnut) Portuguese Brazil (pt_BR) (Thanks for contributing portuguese brazil language goes to LucasTolle) Dutch (nl_NL) (Thanks for contributing dutch language goes to Bart Verkerk) Spanish (es) (Spanish translation by Ibidem Group) Click here for a demo Developer on X Developer on Bluesky Looking for more WordPress plugins? Visit www.schloebe.de/portfolio/

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C