Digital Chicks People Focused Tech Powered Logo

WordPress Vulnerability Report — April 10, 2024

In this report, 200 new vulnerabilities have been publicly disclosed. Security patches for WordPress, 177 plugins and 4 themes are available as of the publishing of this report.

Vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates!

Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.

WordPress Core

A single vulnerability was identified – so update as soon as you can!

WordPress Themes

Themes With No Fix/Patch Available

Woot! No unpatched themes this week!

Themes With A Fix/Patch Available

The vulnerability(ies) have been patched. You should update to the latest version.
  • Rehub
  • Hello Elementor

WordPress Plugins

Plugins With No Fix/Patch Available

The vulnerability(ies) have not been patched. You should deactivate the plugin(s).

  • User Activity Log
  • Slideshow Gallery LITE
  • MM-email2image
  • Bannerlid
  • Auto Poster
  • Breakdance
  • CGC Maintenance Mode
  • Passster – Password Protection
  • Easy Login Styler – White Label Admin Login Page for WordPress
  • EnvíaloSimple
  • Font Farsi
  • Global Elementor Buttons
  • Gradient Text Widget for Elementor
  • Oxygen Builder
  • WordPress Gallery Exporter

Plugins With A Fix/Patch Available

The vulnerability(ies) have been patched. You should update to the latest version.

  • WooCommerce
  • Essential Addons for Elementor
  • ElementsKit Elementor addons
  • File Manager
  • Ocean Extra
  • Premium Addons for Elementor
  • BackWPup – WordPress Backup Plugin
  • Spectra – WordPress Gutenberg Blocks
  • Forminator – Contact Form, Payment Form & Custom Form Builder
  • WordPress Gallery Plugin – NextGEN Gallery
  • Page Builder Gutenberg Blocks – CoBlocks
  • Gutenberg Blocks by Kadence Blocks – Page Builder Features
  • CMB2
  • MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor
  • Royal Elementor Addons and Templates
  • Jeg Elementor Kit
  • Photo Gallery by 10Web – Mobile-Friendly Image Gallery
  • Post Views Counter
  • Responsive Lightbox & Gallery
  • WooCommerce Cart Abandonment Recovery
  • Element Pack Elementor Addons
  • Beaver Builder – WordPress Page Builder
  • Colibri Page Builder
  • Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates
  • Best WordPress Gallery Plugin – FooGallery
  • Genesis Blocks
  • Inline Related Posts
  • PowerPack Addons for Elementor
  • Relevanssi – A Better Search
  • Template Kit – Import
  • Tracking Code Manager
  • Advanced Order Export For WooCommerce
  • ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules
  • Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce
  • EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor
  • LearnPress – WordPress LMS Plugin
  • Sydney Toolbox
  • BoldGrid Easy SEO – Simple and Effective SEO
  • WordPress Tag and Category Manager – AI Autotagger
  • Carousel, Slider, Gallery by WP Carousel – Image Carousel & Photo Gallery, Post Carousel & Post Grid, Product Carousel & Product Grid for WooCommerce
  • WP-Members Membership Plugin
  • Bold Page Builder
  • Easy Digital Downloads – Sell Digital Files & Subscriptions
  • FancyBox for WordPress
  • RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube
  • Video Feeds Aggregator
  • Image Watermark
  • WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels
  • User Profile Builder – Beautiful User Registration Forms, User Profiles & User
  • Role Editor
  • Hubbub Lite – Fast, Reliable Social Sharing Buttons
  • WPFront User Role Editor
  • ConvertKit – Email Newsletter, Email Marketing, Subscribers and Landing Pages
  • SecuPress Free — WordPress Security
  • Post Grid Gutenberg Blocks and WordPress News Plugin – PostX
  • WP Import Export Lite
  • Easy Google Maps
  • Sumo – Boost Conversion and Sales
  • Themify – WooCommerce Product Filter
  • Ultimate Addons for Beaver Builder – Lite
  • All-in-One Video Gallery
  • Ecwid Ecommerce Shopping Cart
  • MP3 Audio Player for Music, Radio & Podcast by Sonaar
  • My Calendar
  • Powerkit – Supercharge your WordPress Site
  • ShortPixel Adaptive Images – WebP, AVIF, CDN, Image Optimization
  • WordPress File Upload
  • 2.101 BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin
  • bunny.net – WordPress CDN Plugin
  • Captcha by BestWebSoft – Spam Protection, Security Plugin for WordPress Forms
  • Classified Listing – Classified ads & Business Directory Plugin
  • Contact Form Email
  • Favorites
  • LifterLMS – WordPress LMS Plugin for eLearning
  • MailMunch – Grow your Email List
  • MasterStudy LMS WordPress Plugin – for Online Courses and Education
  • s2Member – Best Membership Plugin for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions
  • Subscribe To Comments Reloaded
  • Ultimate Maps by Supsysti
  • WP Photo Album Plus
  • WP Server Health Stats
  • Media Library Folders
  • WordPress Backup & Migration
  • Announcer – Sticky Message Banner, Notification Bar – Add to Top, Bottom of your Website
  • Generate Child Theme
  • LearnPress Export Import – WordPress extension for LearnPress
  • WPvivid Backup for MainWP
  • ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup
  • ProfileGrid – User Profiles, Memberships, Groups and Communities
  • Announce from the Dashboard
  • MultiVendorX Marketplace – WooCommerce MultiVendor Marketplace Solution
  • WordPress Tooltips
  • WP Sort Order
  • Edwiser Bridge – WordPress Moodle LMS Integration
  • JS Help Desk – Best Help Desk & Support Plugin
  • WP-Stateless – Google Cloud Storage
  • Advanced Local Pickup for WooCommerce
  • Custom post types, Custom Fields & more
  • Community by PeepSo – Social Network, Membership, Registration, User Profiles
  • Watu Quiz
  • WordPress Comments Import & Export
  • EventPrime – Events Calendar, Bookings and Tickets
  • Products, Order & Customers Export for WooCommerce
  • Import XML and RSS Feeds
  • Modal Popup Box – Popup Builder, Show Offers And News in Popup
    Multiple Page Generator Plugin – MPG
  • WP OAuth Server (OAuth Authentication)
  • Premmerce Product Filter for WooCommerce
  • Super Testimonials
  • Product Sort and Display for WooCommerce
  • WP Directory Kit
  • Contact Form, Survey & Popup Form Plugin for WordPress – ARForms Form Builder
  • Smart Online Order for Clover
  • Form to Chat App
  • Masteriyo LMS – eLearning and Online Course Builder for WordPress
  • Loan Repayment Calculator and Application Form
  • SearchIQ – The Search Solution
  • User Spam Remover
  • WooCommerce Checkout Field Editor (Checkout Manager)
  • App Builder – Create Native Android & iOS Apps On The Flight
  • AppPresser – Mobile App Framework
  • Benchmark Email Lite
  • Church Admin
  • Creative Addons for Elementor
  • ELEX WooCommerce Dynamic Pricing and Discounts
  • WP Poll Maker – Best WordPress Poll Plugin for Voting Contest
  • FG Drupal to WordPress
  • Formsite | Embed online forms to collect orders, registrations, leads, and surveys
  • Nudgify Social Proof, Sales Popup & FOMO – Best WordPress Social Proof Plugin
  • Product Designer
  • ReDi Restaurant Reservation
  • Sign-up Sheets
  • Transcoder
  • Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider
  • RapidLoad 2.2 – Speed Monster in One Plugin
  • Sharkdropship Dropshipping & Affiliate for for AliExpress
  • WordPress Webinar Plugin – WebinarPress
  • WP2LEADS | WordPress und KlickTipp einfach verbinden – WooCommerce and more | RRatingg
  • AWP Classifieds
    Beaver Themer
  • Bricksforge
  • Demo My WordPress
  • Easy Social Share Buttons
  • LayerSlider
  • REHub Framework
  • Relevanssi Premium
  • Slider Revolution
  • Wholesale For WooCommerce
  • WPB Show Core

Looking for peace of mind and less tech stress?​

Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.

Signup for website management and get a tech-savvy team who are committed to your business.

Never worry about your website again.

Let Us Help You

How Do I Update WordPress?

Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.

Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.

Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.

After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.