WordPress Vulnerability Report — December 4, 2024
Since last week, 200 vulnerabilities have been publicly disclosed. 80 of the vulnerable plugins remain unpatched.
Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.
Along with poor user account security, vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates.
If this seems overwhelming, talk to us about a Website Care Plan.
WordPress Core
WordPress Themes
WordPress Plugins
Plugins With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).
- s2Member
- WP Project Manager
- Borderless
- Countdown Timer for Elementor
- Magical Addons For Elementor
- WordPress Portfolio Builder
- Post Carousel Slider for Elementor
- Beds24 Online Booking
- Random Banner
- Video Player for WPBakery
- WordPress Page Builder – Zion Builder
- Elementor Button Plus
- Simple Popup Plugin
- Elementor Image Gallery Plugin
- Smart Marketing SMS and Newsletters Forms
- WP Revisions Manager
- Ni WooCommerce Cost Of Goods
- Softtemplates For Elementor
- ArCa Payment Gateway
- Stripe Donation
- Capitalize My Title WordPress Plugin
- CultBooking Hotel Booking Engine
- FastBook – Responsive Appointment Booking and Scheduling System
- Load More Posts
- Multilevel Referral Affiliate Plugin for WooCommerce
- Out Of Stock Badge
- SpatialMatch IDX
- Third Party Cookie Eraser
- Vertical Carousel
- WP Find Your Nearest
- eDoc Easy Tables – Best WordPress Table Maker
- Simple Header and Footer
- Yahoo! WebPlayer
- Essential Breadcrumbs
- Z-Downloads
- Custom Post Type to Map Store
- SimpleSchema Free
- Mins To Read
- RingCentral Communications Plugin
- Sparkle Elementor Kit
- Content Audit Exporter
- Devnex Addons For
- lementor
- Donate Me
- Newsletter, Email Marketing, Email Subscriber
- Znajd? Prac? z Praca.pl
- Awesome Shortcodes
- YaDisk Files
- adBuddy+ (AdBlocker Detection)
- Advanced What should we write next about
- AIO Contact
- ARForms
- dons for Elementor
- Block Controller
- BP Profile Shortcodes Extra
- Build App Online
- Charity Addon for Elementor
- Chatter
- Cowidgets – Elementor Addons
- Advanced Element Bucket Addons for Elementor
- DancePress (TRWA)
- FAT Services Booking
- Lenxel Core
- PayPal Responder
- Photo Video Store
- Pixobe Cartography
- Paloma Widget
- Pricing Tables For WPBakery Page Builder
- Revy
- WordPress Auction Plugin
- Counter Up
- WP MathJax
- WP Mermaid
Plugins With A Fix/Patch Available
The vulnerability(ies) have been patched. You should update to the latest version.
- Elementor Website Builder
- WPForms
- Spectra
- Photo Gallery, Sliders, Proofing and Themes
- Royal Elementor Addons and Templates
- FluentSMTP
- Otter Blocks
- Spam protection, Anti-Spam, FireWall by CleanTalk
- FileBird
- Jeg Elementor Kit
- Paid Membership Plugin
- Element Pack Elementor Addons
- Beaver Builder
- EmbedPress
- Everest Forms
- Advanced File Manager
- Social Sharing Plugin
- The Plus Addons for Elementor
- Widget Options
- Hustle
- Asset CleanUp: Page Speed Booster
- Parsi Date
- Total Upkeep
- File Manager Pro
- FOX – Currency Switcher Professional for WooCommerce
- Bold Page Builder
- Themesflat Addons For Elementor
- Post Grid Gutenberg Blocks and WordPress Blog Plugin
- Booster for WooCommerce
- Security & Malware scan by CleanTalk
- Tutor LMS Elementor Addons
- Analytify
- Maspik
- Futurio Extra
- Logo Slider
- Wallet for WooCommerce
- Product Labels For Woocommerce (Sale Badges)
- CM Pop-Up Banners for WordPress
- RegistrationMagic
- NEX-Forms
- Paid Membership Subscriptions
- Simple Side Tab
- Primary Addon for Elementor
- Category Ajax Filter
- CM Tooltip Glossary
- WDesignKit
- Product Input Fields for WooCommerce
- WP Travel
- All Bootstrap Blocks
- Arkhe Blocks
- Booking calendar, Appointment Booking System
- Pinpoint Booking System
- CM WordPress Search And Replace Plugin
- Image Alt Text
- Sp*tify Play Button for WordPress
- Watu Quiz
- Additional Order Filters for WooCommerce
- Cryptocurrency Widgets For Elementor
- Restaurant & Cafe Addon for Elementor
- Client Invoicing by Sprout Invoices
- Sugar Calendar
- AppPresser
- Attesa Extra
- Internal Linking for SEO traffic & Ranking
- BNE Gallery Extended
- Captivate Sync
- Church Admin
- Name: CM E-Mail Registration Blacklist
- CM Header & Footer Script Loader
- WordPress Contact Forms
- Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery
- InPost Gallery
- Tumult Hype Animations
- WPCasa
- Login with Vipps and MobilePay
- NiceJob
- StreamWeasels YouTube Integration
- jAlbum Bridge
- AWeber Forms by Optin Cat
- My auctions allegro
- Namaste! LMS
- Simple User Registration
- Campaign Monitor Forms by Optin Cat
- LegalWeb Cloud
- Scratch & Win
- Form Data Collector
- HLS Player
- Slotti Ajanvaraus
- WP GeoNames
- FAQ Builder AYS
- Kudos Donations
- SEO Landing Page Generator
- Skt NURCaptcha
- Ragic Shortcode
- Video Lessons Manager
- CM Business Directory Plugin
- BMLT Tabbed Map
- Quick License Manager
- Support SVG
- FloristPress
- CMSMasters Elementor Addon
- MP3 Sticky Player
- WPGYM
- Leopard
- Pie Register Premium
- Booking & Appointment Plugin for WooCommerce
- WooCommerce Ultimate Gift Card
- JobSearch
Looking for peace of mind and less tech stress?
Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.
Signup for one of our website care/management plans and get a tech-savvy team who are committed to your business.
Never worry about your website again.
Let Us Help YouHow Do I Update WordPress?
Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.
Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.
Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.
After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.