WordPress Vulnerability Report — February 19, 2025
Since our last report, 230 vulnerabilities have been publicly disclosed. 95 of the vulnerable plugins and themes remain unpatched.
Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.
Along with poor user account security, vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates.
If this seems overwhelming, talk to us about a Website Care Plan.
WordPress Core
WordPress Themes
Themes With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should deactivate the themes(s).
- Campress
- Puzzles
Themes With A Fix/Patch Available
Disclosed vulnerability(ies) have been patched. You should update to the latest version.- Uncode
- Avada
- CarSpot
- Click Mag
- Listivo – Classified Ads
- Real Estate 7
- PressMart
- Zox News
- ZoxPress
Looking for peace of mind and less tech stress?
Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.
Signup for one of our website care/management plans and get a tech-savvy team who are committed to your business.
Never worry about your website again.
Let Us Help YouWordPress Plugins
Plugins With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).
- Easy MLS Listings Import
- Gumlet Video
- Actionwear products sync
- Filled In
- 1 Click WordPress Migration
- Aparat Responsive
- Apus Framework
- Naver Syndication V2
- BigBuy Dropshipping Connector for WooCommerce
- Book a Room
- Bootstrap collapse
- WooODT Lite
- CalendApp
- CATS Job Listings
- Chalet-Montagne.com Tools
- Simple Documentation
- DL Leadback
- DX-auto-publish
- Easy Amazon Product Information
- Ebook Downloader
- Embed Google Map
- Events Planner
- Font Awesome WP
- WP-FormAssembly
- GetBookingsWP
- Glance That
- Global Meta Keyword & Description
- Google Drive WP Media
- IE CSS3 Support
- Keap Official Opt-in Forms
- Library Bookshelves
- magayo Lottery Results
- Mortgage Calculator / Loan Calculator
- My Login Logout Plugin
- Easy Quiz Maker
- Open Hours
- Option Editor
- Page/Post Specific Social Share Buttons
- Pallet Packaging for WooCommerce
- WP PHPList
- Post Sync
- Post Thumbs
- Prezi Embedder
- pushBIZ
- R3W InstaFeed
- Rapid Cache
- Reaction Buttons
- Related Posts Line-up-Exactly by Milliard
- Reset
- Rise Blocks
- Mobile
- RSS Filter
- Sensly Online Presence
- ShipEngine Shipping Quotes
- sidebarTabs
- Simple catalogue
- Simple Charts
- Simple Pricing Tables For WPBakery Page Builder
- Simple Responsive Menu
- Simple Signup Form
- Simple Video Management System
- Small Package Quotes – Purolator Edition
- Spiritual Gifts Survey
- Stray Random Quotes
- Themes Coder
- Team Builder
- TinyMCE Advanced
- qTranslate fix editor problems
- Track Logins
- TTT Crop
- Tube Video Ads Lite
- VR-Frases
- Wibiya Toolbar
- Wise Forms
- File Uploads Addon for WooCommerce
- WordPress Activity-o-meter
- WP-Asambleas
- WP-BibTeX
- WP Extra Fields
- FoodBakery
- WP Html Page Sitemap
- WP Job Board Pro
- WP Pricing Table
- OWL Carousel Slider
- WPMovieLibrary
- Mortgage Lead Capture System
- Elfsight Yottie Lite
- Zarinpal Paid Download
Plugins With A Fix/Patch Available
The vulnerability(ies) have been patched. You should update to the latest version.
- Rank Math SEO
- ElementsKit Elementor addons
- Slider, Gallery, and Carousel
- Forminator Forms
- Post SMTP
- WP Ghost (Hide My WP Ghost)
- WP Activity Log
- ProfilePress
- Everest Forms
- Widget Options
- HT Mega – Absolute Addons For Elementor
- Brizy – Page Builder
- Stream
- Spotlight Social Feeds – Block, Shortcode, and Widget
- WP Booking Calendar
- DethemeKit for Elementor
- FULL – Cliente
- BEAR
- Security & Malware scan by CleanTalk
- Analytify
- Ecwid by Lightspeed Ecommerce Shopping Cart
- Read More & Accordion
- HurryTimer
- Custom Block Builder
- Responsive Plus
- Welcart e-Commerce
- GeoDirectory
- WP Google Map
- Media Library Folders
- Qubely
- s2Member
- Team
- Export All Posts, Products, Orders, Refunds & Users
- Chat Widget
- WP Project
- Customer Email Verification for WooCommerce
- JS Help Desk
- ProfileGrid
- Return Refund and Exchange For WooCommerce
- Affiliate Links
- CM Search And Replace
- Super Testimonials
- Leyka
- Majestic Support
- Active Products Tables for WooCommerce
- SKT Blocks – Gutenberg based Page Builder
- Timeline Block – Timeline block plugin for WordPress
- Vitepos – Point of sale (POS) plugin for WooCommerce
- WP Airbnb Review Slider
- Calculator Builder
- DirectoryPress Frontend
- Flexible Wishlist for WooCommerce
- iNET Webkit
- Oliver POS
- Simple Google Calendar Outlook Events Widget
- SuperSaaS – online appointment scheduling
- The Ultimate WordPress Toolkit – WP Extended
- aBlocks – WordPress Gutenberg Blocks
- Marketing Automation
- Waymark
- All-Images.ai
- Give – Divi Donation Modules
- Houzez Property Feed
- NGG Smart Image Search
- aDirectory – WordPress Directory Listing Plugin
- AForms Eats
- Keep Backup Daily
- SpeedSize Image & Video AI-Optimizer
- Easy Elementor Addons
- Scratch & Win
- Web Stories Enhancer
- WooCommerce Pricing
- WP Abstracts
- what3words Address Field
- Content Snippet Manager
- Threepress
- Admire Extra
- CM Map Locations
- Distance Based Shipping Calculator
- Easy Booked
- LTL Freight Quotes
- Magic the Gathering Card Tooltips
- StaffList
- Liveticker (by stklcode)
- WPSyncSheets Lite For WPForms
- Shopwarden
- FuseDesk
- LTL Freight Quotes
- MemorialDay
- Vertex Addons for Elementor
- Woocommerce Brands Plugin
- LTL Freight Quotes – Estes Edition
- LTL Freight Quotes – XPO Edition
- Small Package Quotes – UPS Edition
- LTL Freight Quotes
- Simple Certain Time to Show Content
- Easy Popups
- Chaty Pro
- ConvertPlus
- Fusion Builder
- Gallery
- Global Gallery
- K Elements
- LTL Freight Quotes
- Notif Bell
- Tourmaster
- Uncode Core
- WP Table Manager
How Do I Update WordPress?
Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.
Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.
Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.
After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.