WordPress Vulnerability Report — April 2, 2025
Since our last report, (a whopping) 542 vulnerabilities have been publicly disclosed. 275 of the vulnerable plugins and themes remain unpatched.
Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.
Along with poor user account security, vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates.
If this seems overwhelming, talk to us about a Website Care Plan.
WordPress Core
No vulnerabilities disclosed!
WordPress Themes
Themes With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should deactivate the themes(s).
- AuraMart
- Hester
- MorningTime Lite
- StoreBiz
- Build
- Churel
- City Store
- Navigation Tree Elementor
- newseqo
- RainbowNews
- Rapyd Payment Extension for WooCommerce
- Shopo
- Themify Sidepane WordPress Theme
- Traveler
- Whitish Lite
Themes With A Fix/Patch Available
Disclosed vulnerability(ies) have been patched. You should update to the latest version.
- Big Store
- Unlimited
- Real Estate 7
- WP Weixin
Looking for peace of mind and less tech stress?
Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.
Signup for one of our website care/management plans and get a tech-savvy team who are committed to your business.
Never worry about your website again.
Let Us Help YouWordPress Plugins
Plugins With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).
- Themesflat Addons For Elementor
- GTM Kit – Google Tag Manager & GA4 integration
- OSM – OpenStreetMap
- WDesignKit
- WPCargo Track & Trace
- WP Mobile Bottom Menu
- IMPress for IDX Broker
- Sliced Invoices
- Flag Icons
- Fusion Page Builder
- Gallery – Photo Albums Plugin
- ELEX WooCommerce Request a Quote
- Quick Interest Slider
- Safe Ai Malware Protection for WP
- teachPress
- Timeline Event History
- Directory Listings WordPress plugin – Listing
- Cal.com
- Cryptocurrency Widgets Pack
- Click to Chat
- Swiss Toolkit For WP
- Price by Quantity & Bulk Qua
- tity Discounts for WooCommerce
- Group Chat & Video Chat by AtomChat
- Simple Owl Carousel
- Slider Path for Elementor
- StaticPress
- Custom Database Applications by Caspio
- Google SEO Pressor for Rich snippets
- History Log by click5
- My auctions allegro
- Behance Portfolio Manager
- TGG – WP Optimizer
- Uptime Robot
- WP Link Preview
- ACME Divi Modules
- WordPress Appointment Booking and Online Scheduling
- CF7 Spreadsheets
- Checklist
- EZ SQL Reports Shortcode Widget and DB Backup
- Twice Commerce – Easy Rental Booking System
- Flipdish Ordering System
- Ai Auto Tool Content Writing Assistant All in One
- Appointify
- RSVPMaker
- Advanced WooCommerce Product Sales Reporting
- WP AutoKeyword
- SimplyRETS Real Estate IDX
- Auto Post After Image Upload
- Connector to CiviCRM with CiviMcRestFace
- Leadfox for WordPress
- Ni WooCommerce Product Enquiry
- Send E-mail
- Welcome Popup
- WP Copy Media URL
- Related Posts Widget with Thumbnails
- Apimo Connector
- CBX Poll
- ContentMX Content Publisher
- CookieHint WP
- Custom Content Scrollbar
- WordPress Testimonials Slider
- Rio Video Gallery
- Shopper
- Simple-Audioplayer
- SP Blog Designer
- Ultimate Live Cricket WordPress Lite
- AB Google Map Travel (AB-MAP)
- byBrick Accordion
- CoverManager
- OpenMenu
- wordpress related Posts with thumbnails
- Terms Before Download
- Ultimate Push Notifications
- Varnish WordPress
- PostmarkApp Email Integrator
- Rich Text Editor
- Simple Contact Forms
- Actionwear products sync
- Infusionsoft Web Form JavaScript
- Processing Projects
- Useinfluence
- Chat by ChatweeDesign
- Notification Bar, Sticky Notification Bar, Sticky Welcome Bar
- Salesmate Add-On for Gravity Forms
- Ethiopian Calendar
- AdSense Privacy Policy
- Advanced Dewplayer
- Advanced Post Search
- AI Preloader
- Alert Box Block – Display notice/alerts in the front end
- AlphaOmega Captcha & Anti-Spam Filter
- Amazing service box Addons For WPBakery Page Builder
- ANAC XML Render
- Arrow Maps
- AppExperts
- ARPrice
- Auto Load Next Post
- AvaiBook
- Awesome Logos
- Ayyash Studio
- banner-manager
- Beautiful Link Preview
- Blue Captcha
- BMo Expo
- Breezing Forms
- Browser Address Bar Color
- Browser Caching with .htaccess
- Cackle
- CallPhone’r
- CAS Maestro
- Cazamba
- Contact Form 7 Material Design
- Clear Sucuri Cache
- Clink
- CopyLink
- Menu Duplicator
- CSV to Responsive Tables
- cTabs
- Custom Product Stickers for Woocommerce
- Custom Script Integration
- DAP to Autoresponders Email Syncing
- Driving Directions
- DesignThemes Core Features
- Product Catalog
- Multi Days Events and Multi Events in One Day Calendar
- Duplicate Page and Post
- Easy Page Transition
- Exit Popup Free
- External image replace
- Secret Meta
- Fiverr.com Official Search Box
- Fix Rss Feeds
- Flatty
- Flickr set slideshows
- Frndzk Expandable Bottom Bar
- Generate Post Thumbnails
- GMO Font Agent
- Google Font Fix
- GP Back To Top
- Hacklog Remote Image Autosave
- IG Shortcodes
- Image Captcha
- Image Slider / Slideshow Pearlbells
- Photo Slideshow (Responsive)
- include-file
- Include URL
- Info Boxes Shortcode and Widget
- issuuPress
- JiangQie Official Website Mini Program
- jQuery Dropdown Menu
- Kento WordPress Stats
- Key4ce osTicket Bridge
- KK I Like It
- LH OGP Meta
- Lightview Plus
- Login Alert
- Login Redirect
- LWS SMS
- Map Contact
- Message ticker
- Microblog Poster
- Mobile Navigation
- Music Press Pro
- My Bootstrap Menu
- My Default Post Content
- NanoSupport
- NertWorks All in One Social Share Tools
- NextGEN Gallery Voting
- Nmedia MailChimp
- Easy 301 Redirects
- OK Poster Group
- Omnify
- OmniLeads Scripts and Tags Manager
- OSS Upload
- Page Takeover
- Pesapal Gateway for Woocommerce
- Pop-Up Chop Chop
- PostMash
- Pretty file links
- Pro Rank Tracker
- Quick Localization
- Related Posts via Categories
- Replace Default Words
- Rewrite
- RJ Quickcharts
- SH Email Alert
- ShowTime Slideshow
- Shuffle
- Simple Optimizer
- Simple Rating
- Simple Trackback Disabler
- Simple:Press
- Smart Maintenance Mode
- So-Called Air Quotes
- SoJ SoundSlides
- SoundCloud Ultimate
- sourceplay-navermap
- SpeakPipe
- STEdb Forms
- Super Simple Subscriptions
- Super Static Cache
- Teleport
- Terms of Use
- Text Selection Color
- The Visitor Counter
- Tidekey
- Toggle Box
- Trackserver
- Translator
- Typekit plugin for WordPress
- Top Bar
- Ultimate Security Checker
- Upload Quota per User
- Video Embedder
- Visual Text Editor
- wA11y – The Web Accessibility Toolbox
- wBounce
- Weather Layer
- WordPress Admin Bar Improved
- WordPress SQL Backup
- WP Cards
- WP Church Donation
- WP Colorful Tag Cloud
- WP Database Optimizer
- WP e-Commerce Style Email
- Magic Embeds
- WP Featured Entries
- WP Hotjar
- Job Colors for WP Job Manager
- WP Multistore Locator
- WP Odoo Form Integrator
- WP-OGP
- WP Parallax Content Slider
- VaultRE Contact Form 7
- WP Profitshare
- WP Ride Booking
- WP Social Widget
- WP Supersized
- WP Ultimate Search
- WP01
- WP Event Ticketing
- XV Random Quotes
- YouTube SimpleGallery
- Yummly Rich Recipes
Plugins With A Fix/Patch Available
The vulnerability(ies) have been patched. You should update to the latest version.
- WordPress Importer
- ElementsKit Elementor Addons and Templates
- Spectra Gutenberg Blocks
- Smush Image Optimization
- TablePress
- Slider, Gallery, and Carousel by MetaSlider
- MetForm
- Happy Addons for Elementor
- GDPR Cookie Compliance
- Translate Multilingual sites
- Photo Gallery by 10Web
- GiveWP
- Pods – Custom Content Types and Fields
- SEO Plugin by Squirrly SEO
- The Post Grid
- Event Tickets and Registration
- Kubio AI Page Builder
- LearnPress
- PowerPack Elementor Addons
- Product Import Export for WooCommerce
- Nested Pages
- Booking for Appointments and Events Calendar
- Advanced Woo Search
- Total Upkeep
- Media Library Assistant
- Drag and Drop Multiple File Upload for Contact Form 7
- Ultimate Dashboard
- User Registration & Membership
- Export and Import Users and Customers
- Advanced iFrame
- Easy Digital Downloads
- Form Maker by 10Web
- Simple Banner
- Structured Content (JSON-LD) #wpsc
- Ultimate Blocks – WordPress Blocks Plugin
- Zapier for WordPress
- Greenshift
- Contact Form & SMTP Plugin
- Quiz and Survey Master (QSM)
- SecuPress Free
- Post Grid Gutenberg Blocks for News, Magazines, Blog Websites
- Booster for WooCommerce
- Cost Calculator Builder
- Float menu
- LeadConnector
- Ads by WPQuads
- RomethemeKit For Elementor
- Analytify
- WP Google Review Slider
- Conversios
- Gum Elementor Addon
- InstaWP Connect
- King Addons for Elementor
- Quiz Maker
- Slider by 10Web
- SyntaxHighlighter Evolved
- FunnelKit Automations
- WP Travel Engine
- Import Export Suite for CSV and XML Datafeed
- Product Labels For Woocommerce
- AFI – The Easiest Integration Plugin
- Webhook Automator & Contact Form Integration to Automate 280+ Platforms
- Charitable
- Directorist
- Favorites
- Social Reviews & Recommendations
- Job Postings
- LatePoint – Calendar Booking Plugin for Appointments and Events
- Paid Membership Subscriptions
- Five Star Restaurant Reservations
- Sensei LMS – Online Courses, Quizzes, & Learning
- WP Date and Time Shortcode
- WP Tabs
- Export All Posts, Products, Orders, Refunds & Users
- Chat Widget
- Contact Form by Bit Form
- Essential Real Estate
- Registrations for the Events Calendar
- WP Compress
- Awesome Support
- Cozy Blocks
- Event Manager and Tickets Selling Plugin for WooCommerce
- WP ERP | Complete HR solution with recruitment & job listings
- JS Help Desk
- Shipmondo
- WooCommerce Wishlist
- Quiz Cat
- WPCafe
- Audio Album
- Specific Content For Mobile
- AliExpress Dropshipping Plugin for WooCommerce – AliNext
- Doneren met Mollie
- Inline Image Upload for BBPress
- Stylish Price List – Price Table Builder & QR Code Restaurant Menu
- WP Posts Carousel
- Chartify
- Restaurant Menu and Food Ordering
- Newsletters
- Themify Event Post
- Tickera – WordPress Event Ticketing
- Vimeotheque: Vimeo WordPress Plugin
- WordPress CRM, Email & Marketing Automation
- Scheduled & Automatic Order Status Controller for WooCommerce
- Active Products Tables for WooCommerce
- Responsive Addons for Elementor
- Sitekit
- The Pack Elementor addons
- Appointment Booking and Scheduling Calendar Plugin
- Vitepos – Point of sale (POS) plugin for WooCommerce
- WP-Recall – Registration, Profile, Commerce & More
- Currency Switcher for WooCommerce
- Custom Field For WP Job Manager
- Dr. Flex
- Dropdown multisite selector
- Taxi Booking Manager for WooCommerce
- Event post
- Event Tickets with Ticket Scanner
- Flexible Cookies
- WP Fast Total Search
- Greek Multi Tool
- Just Writing Statistics
- Novelist
- Off-Canvas Sidebars & Menus (Slidebars)
- Quotes llama
- SearchIQ
- SKT Addons for Elementor
- SKU Generator for WooCommerce
- Sunshine Photo Cart
- WordPress Tour & Travel Booking Plugin for WooCommerce
- WishSuite
- WP Docs
- Team Manager
- The Ultimate WordPress Toolkit
- YayExtra – WooCommerce Extra Product Options
- 3DPrint Lite
- Exchange Rates
- Football Pool
- Integration for Google Sheets and Contact Form 7, WPForms, Elementor, Ninja Forms
- RPS Include Content
- Serial Codes Generator and Validator with WooCommerce Support
- Usermaven
- One to one user Chat by WPGuppy
- Leaky Paywall
- Login Widget for Ultimate Member
- Cloudflare Turnstile
- Terms & Conditions Per Product
- TWB Woocommerce Reviews
- ValidateCertify Free
- WooCommerce Fattureincloud
- WP Cassify
- WP Compress for MainWP
- Better Section Navigation
- Custom Fields Account Registration For Woocommerce
- Houzez Property Feed
- Custom Login Logo
- Our Team Members
- PDF for WPForms + Drag and Drop Template Builder
- wordpress publish post email notification
- Stock Sync for WooCommerce with Google Sheets
- Management System & more – FlexStock
- Product Author for WooCommerce
- wpShopGermany IT-RECHT KANZLEI
- Anthologize
- Digital License Manager
- FormLift for Infusionsoft Web Forms
- Simple Giveaways
- SNORDIAN’s H5PxAPIkatchu
- Cool Author Box – For Widget and Post Content
- IP Locator
- jAlbum Bridge
- Listamester
- Contact Form, Drag and Drop Form Builder
- Simplebooklet PDF Viewer and Embedder
- Verge3D Publishing and E-Commerce
- Textmetrics
- Lead Form Data Collection to CRM
- Zoho Billing – Embed Payment Form
- Accounting for WooCommerce
- Christmas Panda
- Clearout Email Validator
- Comment Approved Notifier Extended
- EZ SQL Reports Shortcode Widget and DB Backup
- Gallery for Social Photo
- Hesabfa Accounting
- Slider by BestWebSoft
- Subscribe to Download Lite
- Chatbox Manager
- Web Directory Free
- WordPress WP-Advanced-Search
- WP Google Street View (with 360° virtual tour) & Google maps + Local SEO
- WP Subscription Forms – Subscription Form Plugin for WordPress
- Z Companion
- Administrator Z
- Store Locator Widget
- Support Genix – Helpdesk & Customer Support Ticket System
- WIP WooCarousel Lite
- About Author
- Better WishList API
- Gift Message for WooCommerce
- Stylish Google Sheet Reader 4.0
- CM Download Manager
- Multiple Shipping And Billing Address For Woocommerce
- Image Wall
- Next-Cart Store to WooCommerce Migration
- Cart tracking for WooCommerce
- CRM and Lead Management by vcita
- DICOM Support
- Primer MyData for Woocommerce
- WP2LEADS
- MDJM Event Management
- WPC Smart Upsell Funnel for WooCommerce
- Material Dashboard
- Hostel
- AEC Kiosque
- BizCalendar Web
- EO4WP: EmailOctopus for WordPress
- MicroPayments
- Your Simple SVG Support
- Bitspecter Suite
- Booknetic
- Bridge Core
- BWL Advanced FAQ Manager
- Fusion Builder
- JetBlocks For Elementor
- JetSearch
- JetSmartFilters
- JetWooBuilder
- JetProductGallery
- Smart Maintenance Mode
- tagDiv Composer
- Shortcodes by United Themes
How Do I Update WordPress?
Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.
Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.
Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.
After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.