WordPress Vulnerability Report — December 18, 2024
Since last week, 345 vulnerabilities have been publicly disclosed. 181 of the vulnerable plugins and themes remain unpatched.
Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.
Along with poor user account security, vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates.
If this seems overwhelming, talk to us about a Website Care Plan.
WordPress Core
WordPress Themes
Themes With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should deactivate the themes(s).
- Barter
- Bicycleshop
- Brand
- hmd
- Plain Post
- Avada
- Woffice
- WoodMart
Themes With A Fix/Patch Available
Disclosed vulnerability(ies) have been patched. You should update to the latest version.
- Blocksy
- Flixita
- NewsMunch
- Pubnews
- Soledad
- Sweet Date
WordPress Plugins
Plugins With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).
- WP Mega Menu
- WPCargo Track & Trace
- Awesome Support
- Axeptio
- Radio Player
- EazyDocs
- News Ticker for Elementor
- WP Menu Image
- Smaily for WP
- SQL Chart Builder
- Job Board Manager
- SIP Calculator
- LDD Directory Lite
- The Permalinker
- Nias course
- Role Includer
- Radius Blocks
- WordPress HelpDesk & Support Ticket System Plugin
- WP Cookies Enabler
- Advanced Blog Post Block
- Poll, Poll Forms
- Woocommerce Blocks
- WP-NERD Toolkit
- 3D Avatar User Profile
- Add image to Post
- Advance Menu Manager
- Advanced Data Table For Elementor
- Advanced Fancybox
- Advanced What should we write next about
- AI Post Generator
- Zita Site Builder
- Amazon Product Price
- Animated Counters
- Aphorismus
- AppMaps
- Appsplate
- Arabic Webfonts
- Arena.IM
- Firebase OTP Authentication
- Banner System
- Bet sport Free
- Better WP Login Page
- Bootstrap Buttons
- Buk
- Caldera SMTP Mailer
- Mollie for Contact Form 7
- CK and SyntaxHighlighter
- Code Generator Pro
- Comments On Feed
- Companion Portfolio
- Connatix Video Embed
- CoSchool LMS
- Crafthemes Demo Import
- Cricket Live Score
- Critical Site Intel
- CRUDLab Google Plus Button
- CSV to HTML
- Custom Skins Contact Form 7
- Ultimate Endpoints With Rest Api
- Mimoos
- Display Future Posts
- Dr Affiliate
- DTC Documents
- Easy Site Importer
- ECT Product Carousel
- ECT Social Share
- EELV Newsletter
- Mandrill WP
- eTemplates
- Evernote Sync
- Feedpress Generator
- Flaming Forms
- Flash News / Post
- Floating Video Player
- Gaxx Keywords
- Geoportail Shortcode
- Get Post Content Shortcode
- GitSync
- glomex oEmbed
- Go Animate
- Grid Plus
- Gutensee
- Opt-In Downloads
- Hello In All Languages
- Horizontal scroll image slideshow
- HostFact bestelformulier integrate
- HQ Rental Software
- IDer Login
- Image Mapper
- Increase Sociability
- Insertify
- Instant Appointment
- jCarousel
- Jet Footer Code
- KH Easy User Settings
- Kredeum NFTs
- kvCORE IDX
- LaunchPage.app Importer
- Leader
- LeaderBoard Plugin
- Library Management System
- Like in Vk.com
- Category of Posts
- ListApp Mobile Manager
- LionScripts: Site Maintenance & Noindex Nofollow
- MDC Comment Toolbar
- Metrika
- Minterpress
- Multiple Admin Emails
- My IDX Home Search
- addWeather
- Nabz Image Gallery
- Navayan CSV Export
- Newsletter SubscriptionsOnlyw
- ire Multi Autosubmitter
- Order Delivery & Pickup Location Date Time
- phZoom
- PixProof
- Popup Surveys & Polls for WordPress (Mare.io)
- Portfolio
- Post Carousel & Slider
- Posts and Products Views for WooCommerce
- Posts Date Ranges
- PowerFormBuilder
- Push Monkey Pro
- Quietly Insights
- Share Buttons – Social Media
- Saksh Escrow System
- Saoshyant Element
- SeedProd Pro
- Service
- Sign In With Google
- Simple Booking Widget
- Slope Widgets
- Social Media Sharing
- SOPA Blackout
- WP Simple Pay Lite Manager
- Surbma | SalesAutopilot Shortcode
- SVG Shortcode
- TagGator
- TCBD Popover
- Tidy Up
- TPG Get Posts
- TSB Occasion Editor
- Ui Slider Filter By Price
- Utech World Time
- vBSSO-lite
- Visual Recent Posts
- Visualmodo Elements
- Website Toolbox Community
- WooCommerce Cart Count Shortcode
- WooCommerce Basic Order numbers
- WordPress Filter
- Wovax IDX
- WP-Ban-User
- WP Fiddle
- WP Flipkart Importer
- WP-HideThat
- Wp Login with Ajax
- WP Controller
- Wp NssUser Register
- Wp photo text slider 50
- WP Service Payment Form With Authorize.net
- Tithe.ly Giving Button
- WPBookit
- Admin Customization
- Wr Age Verification
- XML Multilanguage Sitemap Generator
- XPD Reduce Image Filesize
- YDS Support Ticket System
- States Map US
- YooBar
- Youtube Video Grid
Plugins With A Fix/Patch Available
The vulnerability(ies) have been patched. You should update to the latest version.
- WPForms
- MainWP Child
- Ninja Forms
- The Events Calendar
- User Role Editor
- Fluent Forms
- SiteOrigin Widgets Bundle
- Gutenberg Blocks with AI by Kadence WP
- Members
- Popup Builder
- Unlimited Elements For Elementor
- Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content
- Beaver Builder
- Image Widget
- LuckyWP Table of Contents
- Web Stories
- LearnPress
- AI Engine
- Ajax Search Lite
- Bold Page Builder
- Calculated Fields Form
- Easy Digital Downloads
- Ultimate Blocks
- Greenshift
- Persian WooCommerce SMS
- FULL – Cliente
- NotificationX
- PPWP – Password Protect Pages
- New User Approve
- Rate My Post
- Minify HTML
- s2Member
- Subscriptions
- Simple Side Tab
- Essential Real Estate
- Cookie Consent, Consent Log, Cookie Scanner, Script Blocker
- MyParcel
- Events Addon for Elementor
- PowerPack Lite for Beaver Builder
- Primary Addon for Elementor
- Notibar
- Vimeography
- OAuth Single Sign On
- Coupon Affiliates
- WPMobile.App
- ElementsReady Addons for Elementor
- EventPrime
- GEO my WP
- MStore API
- WP Crowdfunding
- Hash Form
- Cognito Forms
- Falcon
- Online Booking & Scheduling Calendar for WordPress
- Active Products Tables for WooCommerce
- Responsive Filterable Portfolio
- Restaurant & Cafe Addon for Elementor
- Restrict
- Simple Link Directory
- WP Timetics
- 360 Javascript Viewer
- Barcode Scanner and Inventory manager
- FormFacade
- ForumWP
- ImageRecycle pdf & image compression
- Memberful
- Posti Shipping
- Simple Restrict
- RapidLoad
- NiceJob
- Property Hive Mortgage Calculator
- Property Hive Stamp Duty Calculator
- WPC Order Notes for WooCommerce
- Quran multilanguage Text & Audio
- Waymark
- WP Pipes
- AR for WordPress
- Car Dealer (Dealership) and Vehicle sales
- Device Detector
- Last Viewed Posts by WPBeginner
- Out of the Block: OpenStreetMap
- AIcomments
- CM Answers
- Cryptocurrency Price Widget
- iChart
- Mark New Posts
- WP Email Log – PostBox
- Spreadr Woocommerce Plugin
- Themify Store Locator
- WooCommerce Additional Fees On Checkout (Free)
- Gutenberg Blocks and Page Layouts
- Projectopia
- Payment Gateway Per Product for WooCommerce
- Check Pincode For Woocommerce
- Currency Converter Widget ? PRO
- NewsmanApp
- Print Science Designer
- Stop Registration Spam
- WP BASE Booking of Appointments, Services and Events
- WP Mailster
- AutoWP – AI Content Writer & Rewriter
- Booking System Trafft
- dejure.org Vernetzungsfunktion
- Email Reminders
- J&T Express Malaysia
- Revi.io
- WordPress Post Grid Layouts with Pagination
- Staggs
- VForm
- Video & Photo Gallery for Ultimate Member
- Gou Manage My Account Menu
- ICDSoft Reseller Store
- Ksher
- Media Downloader
- CRM Perks
- Invoice Payment for WooCommerce
- Seraphinite Bulk Discounts for WooCommerce
- Hurrakify
- SMS for WooCommerce
- Hive Support
- AIKCT Engine Chatbot
- LabelGrid Tools
- Simple Payment
- CarDealerPress
- CE21 Suite
- EduAdmin Booking
- Hack-Info
- FloristPress
- CleverNode Related Content
- Connect Contact Form 7 to Constant Contact V3
- Fancy Roller Scroller
- I Plant A Tree
- ImmoToolBox Connect
- Mail Picker
- Simple Presenter
- SMSify
- UNIVERSAM
- WP Currency Exchange Rates
- WP Quick Shop
- DX Dark Site
- FooGallery Premium
- GeoFlickr
- Hello Event Widgets For Elementor
- WP SuperBackup
- Kundgenerator
- Quran Phrases About Most People Shortcodes
- Responsive Google Maps
- Termin-Kalender
- WooCommerce PDF Vouchers
- WP All Import Pro
Looking for peace of mind and less tech stress?
Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.
Signup for one of our website care/management plans and get a tech-savvy team who are committed to your business.
Never worry about your website again.
Let Us Help YouHow Do I Update WordPress?
Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.
Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.
Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.
After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.