Input validation vulnerability in Annual Archive 1.6.0

The Annual Archive plugin for WordPress has a security vulnerability that allows attackers with contributor-level access or higher to inject malicious web scripts into pages. These scripts will execute when a user visits the page, and can cause harm to the user and the website. This vulnerability affects all versions of the plugin up to, and including, version 1.6.0, due to insufficient input sanitization and output escaping.

Detected in:

Annual Archive open vulnerable versions: >= * <= 1.6.0

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.