WordPress Vulnerability Report — August 14, 2024

Since last week, 181 new vulnerabilities emerged in the WordPress ecosystem including 172 plugins and 9 themes. 63 of the vulnerable plugins and themes remain unpatched,, so run those updates as soon as possible. Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses. Along with poor user account security, vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates. If this seems overwhelming, talk to us about a Website Care Plan.

WordPress Core

No vulnerabilities disclosed!

WordPress Themes

Themes With No Fix/Patch Available

Disclosed vulnerability(ies) have not yet been patched. You should switch the theme if no fix is forthcoming.

  • Busiprof
  • Visual Composer Starter
  • Multipurpose
  • News Flash
  • The Next LVL

Themes With A Fix/Patch Available

  • Orchid Store
  • MDx
  • Houzez
  • Woffice

WordPress Plugins

Plugins With No Fix/Patch Available

Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).

  • PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer
  • Element Pack Elementor Addons
  • Clearfy Cache
  • Form Maker by 10Web
  • Social Slider Feed
  • Analytify
  • WP Dashboard Notes
  • LA-Studio Element Kit for Elementor
  • Mediavine Control Panel
  • weMail
  • Backup and Restore WordPress
  • YaMaps for WordPress Plugin
  • Create by Mediavine
  • WP Job Portal
  • MultiVendorX Marketplace
  • MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder
  • Order Export for WooCommerce
  • Smart Online Order for Clover
  • Enter Addons – Ultimate Template Builder for Elementor
  • Kodex Posts likes
  • WordPress Tour & Travel Booking Plugin for WooCommerce
  • Filr
  • Job Manager and Recruitment Board for Employers and Candidates
  • Bit Form Pro
  • Blox Page Builder
  • Compute Links
  • House Manager
  • Ultimate Membership Pro
  • Leopard
  • Linkify Text
  • My Custom CSS PHP & ADS
  • MyBookTable Bookstore
  • No Update Nag
  • Obfuscate Email
  • Opal Membership
  • Reveal Template
  • Send Emails with Mandrill
  • Store Locator Plus
  • Traffic Manager
  • Mega Addons For Elementor
  • Unite Gallery Lite
  • WHMpress
  • Woo Products Widgets For Elementor
  • Bitly
  • JobSearch

Plugins With A Fix/Patch Available

The vulnerability(ies) have been patched. You should update to the latest version.

  • Essential Addons for Elementor
  • Spectra
  • Premium Addons for Elementor
  • Meta Box – WordPress Custom Fields Framework
  • Easy Table of Contents
  • Gutenberg Blocks with AI by Kadence WP
  • MP for WP – Accelerated Mobile Pages
  • Aruba HiSpeed Cache
  • Element Pack Elementor Addons
  • Slider & Popup Builder by Depicter
  • Lightbox & Modal Popup WordPress Plugin
  • GiveWP
  • Hummingbird Performance
  • Robin image optimize
  • Simple Local Avatars
  • HUSKY – Products Filter Professional for WooCommerce
  • TypeSquare Webfonts
  • LearnPress
  • MainWP Child Reports
  • Tutor LMS
  • Ajax Search Lite
  • Brizy
  • Folders
  • Booking for Appointments and Events Calendar – Amelia
  • 3D FlipBook
  • Media Library Assistant
  • WP Table Builder
  • Category Posts Widget
  • Easy Digital Downloads
  • Ditty – Responsive News Tickers, Sliders, and Lists
  • Gutenberg Blocks, Page Builder
  • Slider by Soliloquy – Responsive Image Slider for WordPress
  • Advanced Cron Manager – debug & control
  • BetterDocs
  • Cost Calculator Builder
  • Accept Stripe Payments
  • Ultimate Addons for Beaver Builder
  • Fuse Social Floating Sidebar
  • Icegram Engage
  • Slider by 10Web
  • Easy PayPal & Stripe Buy Now Button
  • WordPress File Upload
  • 140+ Widgets | Xpro Addons For Elementor
  • Gutenberg Page Builder Blocks & Ready-Made Patterns Library
  • Appointment Booking Calendar Plugin and Scheduling Plugin
  • GeoDirectory
  • Graphina
  • Horizontal scrolling announcements
  • myCred
  • Registrations for the Events Calendar
  • WooCommerce Product Table Lite
  • Participants Database
  • Selection Lite
  • Themify Shortcodes
  • Chatbot for WordPress
  • CM Tooltip Glossary
  • Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently
  • ParcelPanel
  • Ultimate Bootstrap Elements for Elementor
  • JetGridBuilder
  • Timeline and History slider
  • WPCafe
  • JS Help Desk
  • Organization chart
  • Pinpoint Booking System
  • Card Elements for Elementor
  • Cooked
  • FormCraft
  • Icegram Collect
  • Waitlist Woocommerce
  • EventPrime
  • Products, Order & Customers Export for WooCommerce Sender
  • Shared Files
  • Visual Website Collaboration, Feedback & Project Management
  • BSK Forms Blacklist
  • CRM Perks Forms
  • Masteriyo LMS
  • WP Search Analytics
  • Post Grid Master
  • Christmasify!
  • Falang multilanguage for WordPress
  • Football Pool
  • StreamCast
  • Sunshine Photo Cart
  • WappPress
  • WP Bannerize Pro
  • WPSection
  • BerqWP
  • Community Events
  • WPBakery Page Builder
  • Modern Events Calendar
  • Modern Events Calendar Lite
  • Search Filter Pro
  • Shortcodes Ultimate Pro
  • Term And Category Based Posts Widget
  • Docket (WooCommerce Collections / Wishlist / Watchlist)
  • WooCommerce Multiple Customer Addresses & Shipping
  • WP eStore
  • WP eMember

Looking for peace of mind and less tech stress?​

Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.

Signup for one of our website care/management plans and get a tech-savvy team who are committed to your business.

Never worry about your website again.

Let Us Help You

How Do I Update WordPress?

Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.

Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.

Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.

After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.