WordPress Vulnerability Report — April 23, 2025
Since our last report, 304 vulnerabilities have been publicly disclosed. 142 of the vulnerable plugins and themes remain unpatched.
Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.
Along with poor user account security, vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates.
If this seems overwhelming, talk to us about a Website Care Plan.
WordPress Core
WordPress Themes
Themes With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should deactivate the themes(s).
- Arrival
- CWW Portfolio
- Grace Mag
- Opstore
- Sirat
- Xews Lite
- Altair
- Celestial Aura
- CiyaShop
- Eximius
- Grand Restaurant WordPress
- Grip
Themes With A Fix/Patch Available
Disclosed vulnerability(ies) have been patched. You should update to the latest version.
- Betheme
- Dessau
- Dør
- Eduma
- Foton
- Ivy School
- Real Estate 7
- Tastyc
- Wanderland
Looking for peace of mind and less tech stress?
Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.
Signup for one of our website care/management plans and get a tech-savvy team who are committed to your business.
Never worry about your website again.
Let Us Help YouWordPress Plugins
Plugins With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).
- Master Slider
- Simple Sitemap
- Asgaros Forum
- Scriptless Social Sharing
- Logo Carousel Slider
- Checkout Files Upload for WooCommerce
- License For Envato
- Hotel Booking
- ACF: Google Font Selector
- Anything Popup
- Team Members
- Listing
- ActiveDEMAND
- Basic Interactive World Map
- Rescue Shortcodes
- Attendance Manager
- Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment
- Real Estate Manager
- JS Job Manager
- Movylo Marketing Automation
- WP Flipclock
- Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light
- Kata Plus
- Question Answer
- Spice Blocks
- WooMS
- Author WIP Progress Bar
- Bulk Term Editor
- WordPress WP-Advanced-Search
- Bulk Page Stub Creator
- Rating by BestWebSoft
- Site Search 360
- Contact Form vCard Generator
- Projectopia
- BruteGuard
- Dynamic Post
- Starfish Review Generation & Marketing for WordPress
- Capturly
- Run Contests, Raffles, and Giveaways with ContestsWP
- Course Booking System
- HelpGent
- Local Magic
- PDF 2 Post
- Slazzer Background Changer
- Theme Changer
- WooCommerce Products without featured images
- Target Video Easy Publish
- Checkout Field Visibility for WooCommerce
- Hive Support
- Product Lister for eBay
- T&P Gallery Slider
- All push notification for WP
- WP_DEBUG Toggle
- Appsero Helper
- Office Locator
- WP Donate
- ShopApper: Mobile App for WooCommerce
- BMA Lite
- Event Espresso
- ZooEffect
- Add to Header
- Amazon Showcase WordPress Plugin
- AnalyticsWP
- Anthologize
- WPAMS
- Avatar
- bbPress2 shortcode whitelist
- Bknewsticker
- Broken Links Remover
- Login Manager
- Dashboard Notepads
- FAT Services Booking
- Foodbakery Sticky Cart
- Grand Conference
- Gravity Forms CSS Themes with Fontawesome and Placeholders
- hockeydata LOS
- Hospital Management System
- I Draw
- Simple Maps
- KiotViet Sync
- pillow
- Macro Calculator with Admin Email Optin & Data
- Memberpress
- Language
- Modal Survey
- My auctions allegro
- My Marginalia
- Redirect wordpress to welcome or landing page
- Review Wave
- Revision Diet
- Revy
- SUMO Reward Points
- RSS Manager
- Social Media Links
- spam-stopper
- Style Manager
- Széchenyi 2020 Logo
- Testimonial Slider And Showcase Pro
- translit it!
- TuriTop Booking System
- Smart Sections Theme Builder
- WooCommerce Social Login
- FoodBakery
- WP Post to PDF Enhanced
- WP Social Bookmarking
- WP Sticky Side Buttons
- WP Syntax
- WP Twitter Button
- WordPress Video Robot
- wpLike2Get
- WhatsApp Click to Chat Plugin for WordPress
- Xelion Webchat
Plugins With A Fix/Patch Available
The vulnerability(ies) have been patched. You should update to the latest version.
- Contact Form 7
- Essential Addons for Elementor
- Ocean Extra
- Royal Elementor Addons and Templates
- Fluent Forms
- Forminator Forms
- Password Protected
- Ultimate Member
- Insert Headers And Footers
- Element Pack Addons for Elementor
- Download Manager
- Kadence WooCommerce Email Designer
- Social Sharing Plugin – Sassy Social Share
- WordPress Button Plugin MaxButtons
- Icegram Express
- Widget for Social Page Feeds
- Ultimate Dashboard
- Greenshift – animation and page builder blocks
- User Profile Builder
- WP Import Export Lite
- Form Maker by 10Web
- MapPress Maps for WordPress
- Contact Form & SMTP Plugin for WordPress by PirateForms
- Themesflat Addons For Elementor
- Cost Calculator Builder
- Social Slider Feed
- PowerPress Podcasting plugin by Blubrry
- Giveaways and Contests by RafflePress
- WP Editor
- Advanced Dynamic Pricing for WooCommerce
- Docket Cache – Object Cache Accelerator
- Simple Social Media Share Buttons
- WordPress REST API Authentication
- WP Simple Booking Calendar
- AFI – The Easiest Integration Plugin
- Conditional Payments for WooCommerce
- Conditional Shipping for WooCommerce
- HTML5 Audio Player- Best WordPress Audio Player Plugin
- Klarna Checkout for WooCommerce
- Mediavine Control Panel
- WooCommerce Product Table Lite
- WP Data Access
- Eventin
- Themify Shortcodes
- Contact Form by Supsystic
- Debug Log Manager
- ProfileGrid
- Drag and Drop Multiple File Upload for WooCommerce
- WPCafe
- TS Poll
- WooCommerce Builder & Gutenberg WooCommerce Blocks
- Coupon Affiliates
- WPAdverts
- Logo Carousel Gutenberg Block
- ElementsReady Addons for Elementor
- FluentBoards
- FluentCommunity
- Responsive Blocks – WordP
- ess Gutenberg Blocks
- WP Posts Carousel
- Name Directory
- Property Hive
- GoodBarber
- MelaPress Login Security
- Responsive Addons for Elementor
- SKT Blocks
- WP Optin Wheel
- WPCOM Member
- WP Tools
- JobWP
- Listdom
- Membership For WooCommerce
- Most And Least Read Posts Widget
- Sign-up Sheets
- Smart Maintenance Mode
- Tourfic Toolkit
- Ultimate Store Kit
- Ever Accounting
- Integration for WooCommerce and QuickBooks
- WPCasa
- Zephyr Project Manager
- Arigato Autoresponder and Newsletter
- Booking and Rental Manager for Bike | Car | Resort | Appointment | Dress | Equipment
- Church Admin
- Landing Page Cat
- Taskbuilder
- Checkout for PayPal
- OTP-less one tap Sign in
- BERTHA AI. Your AI co-pilot for WordPress and Chrome
- Bring Fraktguiden for WooCommerce
- Verge3D Publishing and E-Commerce
- Cloak Front End Email
- Quentn WP
- Subscribe to Unlock Lite
- Web Directory Free
- WP Subscription Forms
- Administrator Z
- Custom CSS, JS & PHP
- Barcode Generator for WooCommerce
- Elevate Your Community!
- Fast eBay Listings
- TableOn – WordPress Posts Table Filterable
- SB Chart block
- Tax Switch for WooCommerce
- WP Logger
- AdminQuickbar
- Feedify
- Total processing card payments for WooCommerce
- Dashi
- WordPress Internal Link Optimiser
- IP2Location Variables
- Right Click Disable OR Ban
- Verowa Connect
- Email Notifications for Updates
- Material Dashboard
- AI Text to Speech
- CRM Perks
- Hostel
- StoreContrl Woocommerce
- Smart Agreements
- Payment Form for PayPal Pro
- AnalyticsWP
- Booster Plus for WooCommerce
- FS Poster
- JetBlocks For Elementor
- JetBlog
- JetElements For Elementor
- JetMenu
- JetPopup
- JetReviews
- JetTabs
- JetTricks
- JetWooBuilder
- CLEVER
- Live Forms
- Smart Product Review
- Super Store Finder
- Tourmaster
- Unlimited Timeline
- UrbanGo Membership
- User Registration & Membership Pro
- Vitepos
- Advanced Google Maps
- Wp Staging Pro
How Do I Update WordPress?
Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.
Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.
Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.
After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.