WP-EasyArchives
WP-EasyArchives has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for WP-EasyArchives has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Skalucy. WP-EasyArchives is installed on roughly 40 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 3.4.2.
CVE-2025-49345WP-EasyArchives <= 3.1.2 - Cross-Site Request Forgery
Read the full analysisVulnerability Records
WP-EasyArchives
Author
mg12
This plugin isn’t only SEO friendly, but also provides a good user experience, you can filter achives and expand / collapse achive folder. It’s more faster after version 3.0. Features: Expand or collapse the monthly post archive listings. Support for filtering options on AUTHOR and YEAR. Caches the recent posts list, make page load faster. SEO friendly. Supported Languages: US English/en_US (default) 简体中文/zh_CN (translate by mg12) Albanian/sq_AL (translate by Romeo Shuka) Belorussian/by_BY (translate by Marcis Gasuns) Czech/cs_CZ (translate by Ladislav Prskavec) Dutch/nl_NL (translate by Rene Kleine) Français/fr_FR (translate by Jean-Michel MEYER) Hungarian/hu_HU (translate by János Csárdi-Braunstein) Italian/it_IT (translate by Gianni Diurno) Lithuania/lt_LT (translate by Mantas Malcius) Polish/pl_PL (translate by Artur) Russian/ru_RU (translate by kate) Spanish/es_ES (translate by David Tejedor) Türkçe/tr_TR (translate by Hamdi Ömer Faruk) Demo: http://www.neoease.com/archives/
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C