WordPress Vulnerability Report — December 11, 2024
Since last week, 231 vulnerabilities have been publicly disclosed. 97 of the vulnerable plugins and themes remain unpatched.
Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.
Along with poor user account security, vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates.
If this seems overwhelming, talk to us about a Website Care Plan.
WordPress Core
WordPress Themes
Themes With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should deactivate the themes(s).
- Gaga Lite
- One Paze
- tydskrif
Themes With A Fix/Patch Available
Disclosed vulnerability(ies) have been patched. You should update to the latest version.
- Blocksy
- Flixita
- NewsMunch
- Pubnews
- Soledad
- Sweet Date
WordPress Plugins
Plugins With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).
- 140+ Widgets
- s2Member
- Login Widget With Shortcode
- WP Project Manager
- Borderless
- Magical Addons For Elementor
- Pinpoint Booking System
- Minimum and Maximum Quantity for WooCommerce
- Message Filter for Contact Form 7
- News Kit Elementor Addons
- WordPress Page Builder
- ForumWP
- Friends
- DELUCKS SEO
- RRAddons for Elementor
- Import Export For WooCommerce
- Shiptimize for WooCommerce
- Limit Login Attempts (Spam Protection)
- Comfino Payment Gateway
- Designer – Addons for Elementor
- Prodigy Commerce
- Clients
- Elite Notification
- Simple Notification
- Ni WooCommerce Order Export
- Awesome Shortcodes
- Blaze Online eParcel for WooCommerce
- Board Document Manager from CHUHPL
- Easy Replace
- Ni CRM Lead
- Ni WooCommerce Bulk Product Editor
- TAX SERVICE Electronic HDM
- ABCBiz Addons and Templates for Elementor
- Advanced Control Manager for WordPress
- Advanced Options Editor
- AI Quiz
- AIO Contact
- Pulsating Chat Button
- ARForms
- Authors List
- Beautiful Taxonomy Filters
- Block Controller
- BP Profile Shortcodes Extra
- Mollie for Contact Form 7
- Charity Addon for Elementor
- Clickbank Storefront
- SMS for Lead Capture Forms
- CLUEVO LMS, E-Learning Platform
- Cookielay
- Country Blocker
- Advanced Element Bucket Addons for Elementor
- Easy Blocks pro
- Easy Code Snippets
- Easy Social Feed Premium
- Echoza
- eewee admin custom
- Eleblog
- FAQs
- FAT Services Booking
- Folder Gallery
- Funnelforms Free
- Gold Addons for Elementor
- Library Management System
- Contact Form, Survey & Form Builder
- Gallery
- Login With OTP
- Posti Shipping
- Paloma Widget
- Responsive Videos
- Revy
- SG Helper
- Simple Ecommerce Shopping Cart
- Smart PopUp Blaster
- Smoove connector for Elementor forms
- Splash Sync
- SV100 Companion
- TWChat
- TwentyTwenty
- Shortcodes Blocks Creator Ultimate
- Unlock Addons for Elementor
- Wot Elementor Widgets
- WordPress Auction Plugin
- WP Media Optimizer
- Mini Program API
- WP Private Content Plus
- WP System
- Zooom
Plugins With A Fix/Patch Available
The vulnerability(ies) have been patched. You should update to the latest version.
- WooCommerce
- WPForms
- Spectra
- Fluent Forms
- Photo Gallery, Sliders, Proofing and Themes
- Firelight Lightbox
- FileBird
- Element Pack Elementor Addons
- Beaver Builder
- Colibri Page Builder
- Slider & Popup Builder by Depicter
- Gallery Plugin for WordPress
- Advanced File Manager
- FileOrganizer
- Responsive Lightbox & Gallery
- The Plus Addons for Elementor
- TI WooCommerce Wishlist
- AnyWhere Elementor
- PowerPack Elementor Addons
- WPC Smart Quick View for WooCommerce
- WP Hide & Security Enhancer
- Getwid
- If Menu
- Visual Portfolio, Photo Gallery & Post Grid
- Carousel, Slider, Gallery by WP Carousel
- Bold Page Builder
- Form Maker by 10Web
- FancyBox for WordPress
- Gutentor – Gutenberg Blocks
- Themesflat Addons For Elementor
- Post Grid Gutenberg Blocks and WordPress Blog Plugin
- Tutor LMS Elementor Addons
- Analytify
- WP Umbrella
- Maspik
- Futurio Extra
- FV Flowplayer Video Player
- Product Labels For Woocommerce
- Video Gallery
- LA-Studio Element Kit for Elementor
- myCred
- NEX-Forms
- Simple Side Tab
- Swift Performance Lite
- ARMember
- Pojo Forms
- Poll Maker
- WDesignKit
- Related Posts, Inline Related Posts, Contextual Related Posts, Related Content
- WP Travel
- All Bootstrap Blocks
- Arkhe Blocks
- Pinpoint Booking System
- ElementsReady Addons for Elementor
- Contact Form, Survey, Quiz & Popup Form Builder
- WP Job Manager
- Accordion Slider
- Knowledge Base documentation & wiki plugin
- Message Filter for Contact Form 7
- KiviCare
- Online Booking & Scheduling Calendar for WordPress
- Plugin Check (PCP)
- Active Products Tables for WooCommerce
- Client Invoicing by Sprout Invoices
- Free Responsive Testimonials, Social Proof Reviews, and Customer ReviewsWPBIT
- S Addons For Elementor Page Builder
- XLTab
- Captivate Sync
- Contact Form Builder
- Event Tickets with Ticket Scanner
- Listdom
- SearchIQ
- Simple Restrict
- Broadcast
- WPCasa
- Church Admin
- 3DPrint Lite
- Email Address Obfuscation
- Property Hive Mortgage CalculatorQuran
- multilanguage Text & Audio
- jAlbum Bridge
- My auctions allegro
- Additional Custom Order Status for WooCommerceAccounting for WooCommerce
- AWeber Forms by Optin Cat
- iChart
- Namaste! LMS
- Flower Delivery by Florist One
- WIP WooCarousel Lite
- WP eCards
- WP Mailster
- Simple User Registration
- Campaign Monitor Forms
- CardGate Payments for WooCommerce
- Scratch & Win
- Simple Redirection
- Email Reminders
- Form Data Collector
- Next-Cart Store to WooCommerce Migration
- WP GeoNames
- B Testimonial
- ONLYOFFICE Docs
- Drag & Drop Builder, Human Face Detector, Pre-built Templates, Spam Protection, User Email Notifications & more!
- Prodigy Commerce
- NPS computy
- Verowa Connect
- Dollie Hub
- Z-Downloads
- BMLT Tabbed Map
- Quick License Manager
- FloristPress
- CMSMasters Elementor Addon
- Eyewear prescription form
- FooGallery Premium
- Goodlayers Core
- Luna Web Radio Player
- Pie Register Premium
- Pie Register (Add on) – Social Sites Login
Looking for peace of mind and less tech stress?
Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.
Signup for one of our website care/management plans and get a tech-savvy team who are committed to your business.
Never worry about your website again.
Let Us Help YouHow Do I Update WordPress?
Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.
Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.
Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.
After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.