WordPress Vulnerability Report — August 28, 2024

Since last week, 122 new vulnerabilities emerged in the WordPress ecosystem including 118 plugins and 4 themes. 49 of the vulnerable plugins and themes remain unpatched, so run those updates as soon as possible. Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses. Along with poor user account security, vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates. If this seems overwhelming, talk to us about a Website Care Plan.

WordPress Core

No vulnerabilities disclosed!

WordPress Themes

Themes With No Fix/Patch Available

Disclosed vulnerability(ies) have not yet been patched. You should switch the theme if no fix is forthcoming.
  • Esotera
  • Into The Dark
  • Tempera

Themes With A Fix/Patch Available

Disclosed vulnerability(ies) have not been patched.
  • Phlox PRO

WordPress Plugins

Plugins With No Fix/Patch Available

Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).

  • TI WooCommerce Wishlist
  • YARPP – Yet Another Related Posts Plugin
  • WP Table Builder
  • DSGVO All in one for WP
  • Maintenance & Coming Soon Redirect Animation
  • Super Testimonials
  • SKT Blocks – Gutenberg based Page Builder
  • Classic Addons
  • SendGrid for WordPress
  • Skitter Slideshow
  • AdRotate
  • Animated Number Counters
  • App Builder
  • azurecurve Toggle Show/Hide
  • Blog Introduction
  • Brickscore
  • Smart Online Order for Clover
  • Droip
  • GHActivity
  • Gixaw Chat
  • Hide My Site
  • ILC Thickbox
  • LatePoint
  • LWS Affiliation
  • Memberpress
  • Misiek Paypal
  • Misiek Photo Album
  • Music Request Manager
  • OTA Sync Booking Engine Widget
  • Propovoice Pro
  • Responsive Video
  • RT Easy Builder
  • Simple Headline Rotator
  • Snapshot Backup
  • Web and WooCommerce Addons for WPBakery Builder
  • Woo Inquiry
  • WordSurvey
  • WP Testimonial Widget
  • Z Y N I T H

Plugins With A Fix/Patch Available

The vulnerability(ies) have been patched. You should update to the latest version.

  • LiteSpeed Cache
  • Popup Maker
  • Responsive Lightbox & Gallery
  • Orbit Fox by ThemeIsle
  • Beaver Builder
  • Custom Permalinks
  • Email Address Encoder
  • EmbedPress
  • Gallery Plugin for WordPress
  • GiveWP
  • WordPress Button Plugin MaxButtons
  • NitroPack
  • String locator
  • The Plus Addons for Elementor
  • Ninja Tables – Easiest Data Table Builder
  • AI Engine
  • Shield Security
  • Visual CSS Style Editor
  • Piotnet Addons For Elementor
  • Quiz and Survey Master (QSM)
  • WP Last Modified Info
  • Image Hotspot
  • Gutenverse – Blocks and Website Builder for Site Editor
  • Simple Job Board
  • 140+ Widgets | Xpro Addons For Elementor
  • Generate Images
  • WooCommerce Google Feed Manager
  • BP Profile Search
  • AcyMailing
  • Contact Form by Bit Form
  • WP Delicious
  • GEO my WP
  • Logo Showcase Ultimate
  • Shopping Cart & eCommerce Store
  • WPMobile.App
  • WP Crowdfunding
  • Collapsing Archives
  • Name Directory
  • LH Add Media From Url
  • WP Timetics
  • Event Espresso
  • ImageRecycle pdf & image compression
  • Image Optimizer, Resizer and CDN
  • User Private Files
  • Zephyr Project Manager
  • Favicon Generator (CLOSED)
  • Chatbot with ChatGPT WordPress
  • Greenshift Query and Meta Addon
  • Greenshift Woocommerce Addon
  • Oxygen Builder
  • Multilingual CMS
  • WBW Product Table PRO
  • WP Armour Extended
  • File Manager Pro
  • JobSearch

Looking for peace of mind and less tech stress?​

Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.

Signup for one of our website care/management plans and get a tech-savvy team who are committed to your business.

Never worry about your website again.

Let Us Help You

How Do I Update WordPress?

Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.

Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.

Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.

After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.