WordPress Vulnerability Report — August 21, 2024

Since last week, 183 new vulnerabilities emerged in the WordPress ecosystem including 174 plugins and 9 themes. 53 of the vulnerable plugins and themes remain unpatched, so run those updates as soon as possible. Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses. Along with poor user account security, vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates. If this seems overwhelming, talk to us about a Website Care Plan.

WordPress Core

No vulnerabilities disclosed!

WordPress Themes

Themes With No Fix/Patch Available

Disclosed vulnerability(ies) have not yet been patched. You should switch the theme if no fix is forthcoming.

  • Allegiant
  • Bravada
  • Busiprof
  • GivingPress Lite
  • Visual Composer Starter
  • Purity Of Soul

Themes With A Fix/Patch Available

Disclosed vulnerability(ies) have not been patched.

  • Hello Agency
  • Bricks Builder
  • Houzez

WordPress Plugins

Plugins With No Fix/Patch Available

Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).

  • Cookie Notice & Compliance for GDPR / CCPA
  • Clearfy Cache
  • Button contact VR
  • Analytify
  • Backup and Restore WordPress
  • WP User Manager
  • WP SMS
  • WP Job Portal
  • All Bootstrap Blocks
  • Photo Engine
  • Propovoice
  • Skitter Slideshow
  • Admission AppManager
  • AdRotate
  • Bit Form Pro
  • Smart Online Order for Clover
  • Compute Links
  • DL Robots.txt
  • Simple Share
  • Ultimate Membership Pro
  • Leopard
  • LOGIN AND REGISTRATION ATTEMPTS LIMIT
  • Create by Mediavine
  • MyBookTable Bookstore
  • Opti Marketing
  • Order Export for WooCommerce
  • Snapshot Backup
  • Store Locator Plus
  • TrueBooker
  • Mega Addons For Elementor
  • WHMpress
  • InPost for WooCommerce
  • Woo Products Widgets For Elementor
  • JobSearch
  • WP MultiTasking

Plugins With A Fix/Patch Available

The vulnerability(ies) have been patched. You should update to the latest version.

  • WooCommerce
  • LiteSpeed Cache
  • Essential Addons for Elementor
  • Popup Maker
  • MetForm
  • Fonts Plugin
  • SpeedyCache
  • White Label CMS
  • DearFlip
  • Element Pack Elementor Addons
  • Stripe Payments For WooCommerce
  • Slider & Popup Builder by Depicter
  • EmbedPress
  • GiveWP
  • Insert PHP Code Snippet
  • Newsletter, SMTP, Email marketing and Subscribe forms by Brevo
  • The Ultimate Video Player For WordPress
  • Relevanssi
  • SEO Plugin by Squirrly SEO
  • The Plus Addons for Elementor
  • Asset CleanUp: Page Speed Booster
  • Tutor LMS
  • Theme My Login
  • AI Engine
  • Media Library Assistant
  • Clone
  • FOX
  • Category Posts Widget
  • Download Plugins and Themes in ZIP from Dashboard
  • Gutentor
  • Post Grid and Gutenberg Blocks
  • Structured Content
  • WP Last Modified Info
  • HTML5 Video Player
  • Brave
  • Void Contact Form 7 Widget For Elementor Page Builder
  • Icegram Engage
  • Child Theme Creator by Orbisius
  • UsersWP
  • WordPress File Upload
  • wpForo Forum
  • WPBakery Page Builder Addons by Livemesh
  • AFI – The Easiest Integration Plugin
  • Bold Timeline Lite
  • Cryptocurrency Widgets – Price Ticker & Coins List
  • RegistrationMagic
  • E2Pdf – Export Pdf Tool for WordPress
  • Envo’s Elementor Templates & Widgets for WooCommerce
  • Generate Images
  • Modal Window – create popup modal window
  • myCred
  • Landing Page Builder
  • Recipe Card Blocks for Gutenberg & Elementor
  • ReviewX
  • weMail
  • WPC Frequently Bought Together for WooCommerce
  • WP Data Access – WordPress App, Table and Form Builder plugin
  • BP Profile Search
  • ARMember
  • Plugin Notes Plus
  • InPost PL
  • Contact Form by Bit Form
  • Custom Layouts
  • GEO my WP
  • JS Help Desk
  • Salon Booking System
  • Void Elementor Post Grid Addon for Elementor Page builder
  • Shopping Cart & eCommerce Store
  • WP Telegram Widget and Join Link
  • Clever Addons for Elementor
  • Meta Field Block
  • Icegram Collect
  • MStore API
  • Order Tracking
  • Dark Mode for WP Dashboard
  • Newsletters
  • oik
  • Responsive Blocks
  • WP-Lister Lite for eBay
  • Visual Website Collaboration, Feedback & Project Management
  • JoomSport
  • Masteriyo LMS
  • Team Showcase
  • Print Labels with Barcodes
  • Custom Field For WP Job Manager
  • Event Tickets with Ticket Scanner
  • FormFacade
  • Invite Anyone
  • PDF Builder for WPForms
  • Ultimate Store Kit Elementor Addons
  • WP Bannerize Pro
  • WP Travel Gutenberg Blocks
  • WordPress Webinar Plugin
  • Login As Users
  • Grow by Tradedoubler
  • Employee, Leave and Recruitment Management System
  • Chatbot with ChatGPT WordPress
  • Sheet to Table Live Sync for Google Sheet
  • PowerPack for Beaver Builder
  • ElementsKit Pro
  • JetBlocks For Elementor
  • JetElements For Elementor
  • JetSearch
  • JetTabs
  • tagDiv Opt-In Builder
  • Term And Category Based Posts Widget
  • WooCommerce Social Login
  • WP eStore
  • Zephyr Project Manage

Looking for peace of mind and less tech stress?​

Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.

Signup for one of our website care/management plans and get a tech-savvy team who are committed to your business.

Never worry about your website again.

Let Us Help You

How Do I Update WordPress?

Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.

Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.

Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.

After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.