← WordPress Vulnerabilities
WordPress security by component

Annual Archive

Annual Archive is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Apr 26, 2024; the highest CVE/CNA score is 6.5.

Plugin slug: anual-archive

CVE-2024-33598: Annual Archive: Cross-site scripting

Annual Archive is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedApr 26, 2024
Safe version guidanceSee mitigation notes
Safe version
Apr 26, 2024 CVE-2024-33598
Annual Archive: Cross-site scripting
Annual Archive is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE5.9
NVDPending
Dec 14, 2023 CVE-2023-49847
Annual Archive: Cross-site scripting
Annual Archive is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.5
NVD5.4