Digital Chicks People Focused Tech Powered Logo

WordPress Vulnerability Report — April 17, 2024

In this report, 342 new vulnerabilities have been publicly disclosed. Security patches for WordPress, 234 plugins and 19 themes are available as of the publishing of this report.

Along with poor user account security, vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates

Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.

WordPress Core

A single vulnerability was identified – so update as soon as you can!

WordPress Themes

Themes With No Fix/Patch Available

The vulnerability(ies) have not been patched. You should deactivate the theme(s).

  • Decode
  • Gridsby
  • GuCherry Blog
  • HappenStance
  • i-excel
  • i-max
  • Sensible WP

Themes With A Fix/Patch Available

The vulnerability(ies) have been patched. You should update to the latest version.

  • Blocksy
  • CityLogic
  • Default Mag
  • Emmet Lite
  • Lightning
  • Namaha
  • NewsXpress
  • Panoramic
  • PopularFX
  • Sarada Lite
  • Shopstar!
  • Sliding Door
  • Spa and Salon
  • Tainacan Interface
  • The Conference
  • X-T9
  • Soledad

WordPress Plugins

Plugins With No Fix/Patch Available

The vulnerability(ies) have not been patched. You should deactivate the plugin(s).

  • Advanced Search
  • Advanced Page Visit Counter
  • Advanced Post Block
  • AIKit
  • Aspose.Words Exporter
  • Shortcodes and extra features for Phlox theme
  • Before And After
  • bizcalendar-web
  • Bulk Block Converter
  • Canva – Design beautiful blog graphics
  • CBX Bookmark & Favorite
  • Citadela Listing
  • Convert Post Types
  • Crony Cronjob Manager
  • Custom Order Statuses for WooCommerce
  • Customily Product Personalizer
  • Delete Custom Fields
  • Disable Comments | WPZest
  • Easy CountDowner
  • Easy Logo
  • EZ Form Calculator
  • Filter Custom Fields & Taxonomies Light
  • Find Duplicates
  • Fixed HTML Toolbar
  • Flash Video Player
  • Font Farsi
  • Forms to Zapier, Integromat, IFTTT, Workato, Automate.io, elastic.io, Built.io, APIANT, Webhook
  • Freshdesk (official)
  • Kimili Flash Embed
  • Contact Form & Lead Form Elementor Builder
  • Libsyn Publisher Hub
  • Related Posts for WordPress
  • MJ Update History
  • Ovic Addon Toolkit
  • Payment Forms for Paystack
  • Product Feed on WooCommerce for Google
  • Code Insert Manager (Q2W3 Inc Manager)
  • Realtyna Organic IDX plugin
  • Sangar Slider
  • Shopkeeper Extender
  • WP Matterport Shortcode
  • Short URL
  • Simple Testimonials Showcase
  • Tax Rate Upload
  • Post Type Builder (PTB)
  • Mega Addons For Elementor
  • User Activity Log Pro
  • Appointment Bookings for Zoom GoogleMeet and more
  • WidgetKit
  • 2Checkout Payment Gateway for WooCommerce
  • Simple Registration for WooCommerce
  • WP-Cufon
  • WP File Download Light
  • WP Radio
  • Search Keyword Redirect
  • WP TradingView
  • WP User Profile Avatar
  • Plugins With A Fix/Patch Available

The vulnerability(ies) have been patched. You should update to the latest version.

  • WooCommerce
  • ElementsKit Elementor addons
  • EWWW Image Optimizer
  • Speed Optimizer
  • Website Builder by SeeProd
  • Smart Slider 3
  • Meta Box – WordPress Custom Fields Framework
  • Ocean Extra
  • Premium Addons for Elementor
  • The Events Calendar
  • BackWPup
  • Slider, Gallery, and Carousel by Metalider
  • WP Shortcodes Plugin
  • Forminator
  • WordPress Gallery Plugin
  • Gutenberg Blocks by Kadence Blocks
  • WP Go Maps (formerly WP Google Maps)
  • Migration, Backup, Staging – WPvivid
  • Favicon by RealFaviconGenerator
  • Gutenberg
  • Newsletter
  • Otter Blocks
  • locksy Companion
  • Smash Balloon Social Post Feed
  • Photo Gallery by 10Web – Mobile-Friendly Image Gallery
  • Ultimate Member
  • Paid Membership Plugin
  • Ivory Search – WordPress Search Plugin
  • Element Pack Elementor Addons
  • Download Manager
  • Best WordPress Gallery Plugin – FooGallery
  • GiveWP – Donation Plugin and Fundraising Platform
  • Inline Related Posts
  • Import any XML or CSV File to WordPress
  • Email Subscribers by Icegram Express
  • Enhanced Media Library
  • Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
  • Remove Footer Credit
  • WPZOOM Social Feed Widget & Block
  • Real Media Library: Media Library Folder & File Manager
  • Sydney Toolbox
  • Theme My Login
  • Clone
  • BoldGrid Easy SEO
  • User Registration
  • ActiveCampaign
  • Elementor Addons by Livemesh
  • Advanced iFrame
  • Booking for Appointments and Events Calendar – Amelia
  • Customer Reviews for WooCommerce
  • Exclusive Addons for Elementor
  • Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
  • Redirection
  • Spotlight Social Feeds [Block, Shortcode, and Widget]
  • WPC Smart Quick View for WooCommerce
  • Carousel, Slider, Gallery by WP Carousel
  • WP Encryption
  • Bold Page Builder
  • FancyBox for WordPress
  • RSS Aggregator by Feedzy
  • WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels
  • Carousel Slider
  • DethemeKit For Elementor
  • Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel
  • Cron Manager – debug & control
  • FV Flowplayer Video Player
  • Link Whisper Free
  • Login With Ajax
  • Social Share, Social Login and Social Comments Plugin – Super Socializer
  • Testimonial Slider
  • BEAR – Bulk Editor and Products Manager Professional for WooCommerce
  • WP Customer Reviews
  • Ultimate Before After Image Slider & Gallery – BEAF
  • Dashboard Welcome for Elementor
  • Envo Extra
  • Import Users from CSV
  • IP2Location Country Blocker
  • MailChimp Forms by MailMunch
  • Email Marketing for WooCommerce by Omnisend
  • Powerkit – Supercharge your WordPress Site
  • Top Bar
  • Welcart e-Commerce
  • weForms – Easy Drag & Drop Contact Form Builder For WordPress
  • NextMove Lite – Thank You Page for WooCommerce
  • WP Accessibility Helper (WAH)
  • Asgaros Forum
  • BA Book Everything
  • bunny.net
  • Language Translate Widget for WordPress – ConveyThis
  • E2Pdf – Export To Pdf Tool for WordPress
  • eCommerce Product Catalog Plugin for WordPress
  • eRoom – Zoom Meetings & Webinars
  • Jobs for WordPress
  • Legal Pages
  • LifterLMS
  • Page Builder: Live Composer
  • Mailster WordPress Newsletter Plugin Compatibility Tester
  • Order Delivery Date for WooCommerce
  • Popup by Supsystic
  • Membership Plugin – Restrict Content
  • Simple Post Notes
  • UsersWP
  • WP Google Analytics Events
  • Mail logging
  • WooCommerce Google Feed Manager
  • Elements Plus!
  • WooCommerce UPS Shipping
  • Smart Forms – when you need more than just a contact form
  • Fatal Error Notify
  • Event Manager and Tickets Selling Plugin for WooCommerce
  • Unlimited Elementor Inner Sections By BoomDevs
  • WPvivid Backup for MainWP
  • Finale Lite
  • ProfileGrid
  • Ultimate Product Catalog
  • WP Compress
  • Load More Anything
  • Boostify Header Footer Builder for Elementor
  • Country State City Dropdown CF7
  • Product Input Fields for WooCommerce
  • Radio Player
  • Responsive Gallery Grid
  • Responsive Tabs
  • Ultimate Bootstrap Elements for Elementor
  • WP Login and Logout Redirect
  • WOLF – WordPress Posts Bulk Editor and Manager Professional
  • Church Content – Sermons, Events and More
  • GEO my WordPress
  • Intagrate Lite
  • Podlove Podcast Publisher
  • WP Client Reports
  • Shopping Cart & eCommerce Store
  • CP Media Player
  • Contact Form Plugin
  • Everest Backup – WordPress Cloud Backup, Migration, Restore & Cloning Plugin
  • Marker.io – Visual Website Feedback
  • MultiParcels Shipping For WooCommerce
    Account Engagement
  • WordPress Hosting Benchmark tool
  • WPC Grouped Product for WooCommerce
  • WP Synchro – WordPress Migration Plugin for Database & Files
  • Zoho Campaigns
  • Premmerce Product Filter for WooCommerce
  • SEO Booster
  • TOP Table Of Contents
  • Wallet System for WooCommerce
  • Extra Product Options Builder for WooCommerce
  • Custom Thank You Page Customize For WooCommerce by Binary Carpenter
  • Currency per Product for WooCommerce
  • Gallery Box
  • GG Woo Feed for WooCommerce Shopping Feed on Google Facebook and Other Channels
  • Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported)
  • InstaWP Connect – 1-click WP Staging & Migration
  • LH Add Media From Url
  • Table Plugin for WordPress with Google Sheets Integration – Sheets to WP Table Live Sync
  • Open Close WooCommerce Store
  • WP Event Aggregator
  • AppPresser – Mobile App Framework
  • Benchmark Email Lite
  • Church Admin
  • TempTool [Show Current Template Info]
  • Dashboard To-Do List
  • ELEX WooCommerce Dynamic Pricing and Discounts
  • XPlainer – WooCommerce Product FAQ [WooCommerce Accordion FAQ Plugin]
  • Login
  • USPS Shipping for WooCommerce – Live Rates
  • Login with phone number
  • MihanPanel – User Login , Registration and Dashboard
  • Netgsm
  • No-Bot Registration
  • Novelist
  • POEditor
  • ReDi Restaurant Reservation
  • Save as PDF Plugin by Pdfcrowd
  • WordPress Tour & Travel Booking Plugin for WooCommerce – WpTravelly
  • Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider
  • TWIPLA (Visitor Analytics IO)
  • Multi Currency For WooCommerce
  • WP Dynamic Keywords Injector
  • MWW Disclaimer Buttons
  • Siteimprove
  • BMI Adult & Kid Calculator
  • Better Chat Support – Chat Bubble and Chat Button with Gutenberg, Elementor and Shortcode
  • Webinar Solution
  • F4 Improvements
  • WP2LEADS | WordPress und KlickTipp einfach verbinden
  • NPS computy
  • Save as Image Plugin by Pdfcrowd
  • 5 star review funnel for Google Reviews, Trustpilot, ProvenExpert and more | RRatingg
  • AffiEasy
  • AWP Classifieds
  • BWL Advanced FAQ Manager
  • Calendarista Basic Edition
    Digital Publications by Supsystic
  • Essential Grid
  • Fancy Product Designer
  • WPBakery Page Builder
  • RestroPress
  • Slider Revolution
  • Table & Contact Form 7 Database – Tablesome
  • WooCommerce Customers Manager
  • WP Cost Estimation & Payment Forms Builder
  • WP Activity Log Premium
  • WPB Show Core

Looking for peace of mind and less tech stress?​

Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.

Signup for website management and get a tech-savvy team who are committed to your business.

Never worry about your website again.

Let Us Help You

How Do I Update WordPress?

Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.

Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.

Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.

After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.