Skip to content
StaleWP

Watch Radar no. 97 · Quiet

YARPP

By YARPP

What it does: Shows related posts on a site.

Why it’s listed: Almost two years without an update, and a long history of fixed advisories. It moves to Plan a move if it stays quiet past November 2026. It is still downloaded about 13,000 times a month and its latest reviews average 4.9 stars, so for now this is a watch, not a move.

View on WordPress.org ↗ Its admin notices on dismissed.fyi ↗ Checked Reviewed by Abhishek Deshpande

Active installs
100k+
Last updated
2024-11-11
Tested up to
6.7.11
Rating
4.8 / 5 (1,165)
Version
5.30.11
Maintainers
2

Is YARPP still maintained?

It has gone between one and two years without an update. That is an early sign, not a reason to move yet.

Quiet: No update for over a year.

Placements are our opinion, based on public evidence. Risk here means a plugin may not get a fix if a problem appears. It doesn’t mean we found a flaw, unless we show an advisory. Going quiet alone never puts a plugin in Replace now.

Updates No release since 2024-11-11. That was 2 yr before our check. WordPress.org plugin directory · checked 2026-10-31
Compatibility Tested up to WordPress 6.7.11. WordPress 7.1.4 was current on 2026-10-31. WordPress.org plugin directory · checked 2026-10-31
Security 8 public advisories on record. Details are below. wpvulnerability.net · checked 2026-10-31
Reviews The latest 10 reviews average 4.9 stars, against 4.8 overall. None of them gave 1 or 2 stars. Newest activity: 2026-10-22. We see no negative trend. WordPress.org reviews · checked 2026-10-31
Maintainers 2 listed contributors. 0 of 1 recent support threads are marked resolved. WordPress.org plugin directory · checked 2026-10-31
Usage 13,074 downloads in the last 30 days, including updates. 84.88% of sites run version 5.30. WordPress.org stats · checked 2026-10-31

What to do next

Compare your options now if related posts matter to your site.

Alternatives to YARPP to consider

Contextual Related Posts ↗

Show related posts by content.

50k+ installs · 4.8 stars · Updated 2026-10-16 · Tested 7.1.4

Related Posts Thumbnails ↗

Related posts with thumbnails.

20k+ installs · 4.9 stars · Updated 2026-10-19 · Tested 7.1.4

Related Posts for WordPress ↗

Related posts for WordPress.

10k+ installs · 4.6 stars · Updated 2026-10-20 · Tested 7.1.4

Each listed plugin was updated in the last six months, is tested with WordPress 7.0 or newer, and had no open advisory in WPVulnerability when we checked. We have not tried them ourselves. No one pays to appear here.

Security record

AdvisorySeverityFixed in
Cross-site request forgery Not scored 4.2.5
CVE-2024-43919 ↗
Access control
Critical (9.8) 5.30.11
CVE-2023-6495 ↗
Cross-site scripting
Medium (4.8) 5.30.10
CVE-2024-0602 ↗
Cross-site scripting
Medium (4.0) 5.30.10
CVE-2023-2433 ↗
Cross-site scripting
Medium (5.4) 5.30.4
CVE-2023-0579 ↗
SQL injection
High (8.8) 5.30.3
CVE-2022-45374 ↗
Local file inclusion
High (7.7) 5.30.5
CVE-2022-4471 ↗
Cross-site scripting
Medium (5.4) 5.30.3

wpvulnerability.net · checked 2026-10-31

A listed advisory does not mean the current version is exploitable.

Latest reviews

Dates show last activity. Titles are written by WordPress.org users.

Also on this radar: Post lists

No one can pay to appear on the radar or to change a placement. How we stay independent

Something wrong, or updated since we checked? Suggest a correction

StaleWP Newsletter

What changed in the plugin directory, twice a month. Free, unsubscribe anytime.

See how we handle your email on our Legal page.