WordPress Vulnerability Report — February 26, 2025
Since our last report, 335 vulnerabilities have been publicly disclosed. 177 of the vulnerable plugins and themes remain unpatched.
Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.
Along with poor user account security, vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates.
If this seems overwhelming, talk to us about a Website Care Plan.
WordPress Core
WordPress Themes
Themes With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should deactivate the themes(s).
- All Patched – Yea!
Themes With A Fix/Patch Available
Disclosed vulnerability(ies) have been patched. You should update to the latest version.
- Uncode
- CarSpot
- Enfold
- Hostiko
- MediCenter – Health Medical Clinic WordPress Theme
- Pearl – Corporate Business
- PressMart
Looking for peace of mind and less tech stress?
Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.
Signup for one of our website care/management plans and get a tech-savvy team who are committed to your business.
Never worry about your website again.
Let Us Help YouWordPress Plugins
Plugins With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).
- Ibtana
- Social Warfare
- Newpost Catch
- Estatik Real Estate Plugin
- Raptive Ads
- Estatik Mortgage Calculator
- Age Verification
- Store Locator Widget
- Responsive Flickr Slideshow
- PiwigoPress
- Terms Dictionary
- Better Customer List for WooCommerce
- Easy MLS Listings Import
- List Related Attachments
- Prime Addons for Elementor
- Gumlet Video
- Actionwear products sync
- A1POST.BG Shipping for WooCommerce
- 1 Click WordPress Migration
- 17TRACK for WooCommerce
- 3D Photo Gallery
- Add Linked Images To Gallery
- ADFO
- Adsmonetizer
- All-In-One Cufon
- AMO Team Showcase
- Apptivo Business Site CRM
- Archive Page
- Ark Theme Core
- Auto Tag Links
- Bandsintown Events
- BigBuy Dropshipping Connector for WooCommerce
- Blightly Explorer
- Booknetic
- Bravo Search & Replace
- Bulk Content Creator
- Widget BUY.BOX
- WooODT Lite
- C9 Admin Dashboard
- C9 Blocks
- Categorized Gallery Plugin
- CATS Job Listings
- CHATLIVE
- Coaching Staffs
- Contact Form 7 Star Rating
- Contact Form 7 Star Rating with font Awesome
- Cookie Notice Bar
- Cosmic Blocks
- Live CSS
- Custom Post Type Date Archives
- able Auto Updates
- Drivr Lite
- Easy Form by AYS
- Education Addon for Elementor
- CanadaHelps Embedded Donation Form
- Erima Zarinpal Donate
- F12-Profiler
- File Icons
- Flagged Content
- Flashfader
- flickr-slideshow-wrapper
- WP-FormAssembly
- Fresh Framework
- GetBookingsWP
- Gift Vouchers
- Google Maps for WordPress
- Maps GPX Viewer
- Helloprint
- Hover Image Button
- Keap Official Opt-in Forms
- EZ InLinkz linkup
- YouTube Playlists with Schema
- Just Variables
- Kush Micro News
- Legoeso PDF Manager
- Library Bookshelves
- Phee’s LinkPreview
- Local Search SEO Contact Page
- Woocommerce – Loi Hamon
- magayo Lottery Results
- Mambo Importer
- AcuGIS Leaflet Maps
- Minimum Password Strength
- Mortgage Calculator / Loan Calculator
- Typed JS
- MyTicket Events
- Namaste! LMS
- NHR Options Table Manager
- Get Posts
- Önceki Yaz? Link
- Open Hours
- Option Editor
- Page and Post Lister
- Pathomation
- PeproDev Ultimate Invoice
- Photo Gallery ( Responsive )
- WordPress Photo Gallery – Image Gallery
- Pie Register
- PlayerJS
- Pollin
- PrivateContent
- Profile Widget Ninja
- Protected wp-login
- Pure Chat
- Quotes llama
- Rapid Cache
- Ravpage
- RAYS Grid
- Reaction Buttons
- Reactive Mortgage Calculator
- Reset
- Residential Address Detection
- Restrict Taxonomies
- Auto Ad Inserter
- Saoshyant Slider
- Show Me The Cookies
- Simple Charts
- Simple Email Subscriber
- Simple Google Sitemap
- Simple Pricing Tables For WPBakery
- Simple Signup Form
- Small Package Quotes
- Smart Maintenance & Countdown
- Live Streaming Video Player
- SS Quiz
- Sticky Header On Scroll
- Table of Contents Block
- Themes Coder
- TCBD Tooltip
- Team Builder
- Theme File Duplicator
- Track Logins
- Trash Duplicate and 301 Redirect
- Tube Video Ads Lite
- WordPress Portfolio Builder
- Ultimate Classified Listings
- UltraEmbed
- UMich OIDC Login
- User List
- VG PostCarousel
- Video.js HLS Player
- ViperBar
- VR-Frases
- QR Code for WooCommerce
- Shipmozo Courier Tracking
- Wise Forms
- File Uploads Addon for WooCommerce
- WOO Codice Fiscale
- Direct Checkout Button for WooCommerce
- WooCommerce Recargo de Equivalencia
- WooCommerce Display Products by Tags
- WooCommerce HTML5 Video
- WP About Author
- WP-Asambleas
- WP-BibTeX
- JPG, PNG Compression and Optimization
- WP-PostRatings Cheater
- WP Sitemap
- WP Social SEO Booster
- OWL Carousel Slider
- WP Video Posts
- WP Wiki Tooltip
- Mortgage Lead Capture System
- WPUpper Share Buttons
- WPYog Documents
- Yawave
Plugins With A Fix/Patch Available
The vulnerability(ies) have been patched. You should update to the latest version.
- Elementor Website Builder
- ElementsKit Elementor addons
- SVG Support
- WPvivid Backup & Migration
- Royal Elementor Addons and Templates
- Post SMTP
- Head, Footer and Post Injections
- Unlimited Elements For Elementor
- FileBird
- Ultimate Member
- Essential Blocks
- Everest Forms
- Strong Testimonials
- Event Tickets and Registration
- Ajax Search LiteEvents Manager
- Master Slider
- WP ULike
- Simple Image Sizes
- Embed Any Document
- Carousel, Slider, Gallery by WP Carousel
- Login/Signup Popup ( Inline Form + Woocommerce )
- Form Maker by 10Web
- Greenshift
- Post Grid and Gutenberg Blocks
- WooCommerce Checkout & Funnel Builder by FunnelKit
- Rife Elementor Extensions & Templates
- Visualizer: Tables and Charts Manager for WordPress
- Accept Donations with PayPal & Stripe
- Ecwid by Lightspeed Ecommerce Shopping Cart
- IP2Location Country Blocker
- Lenix Leads Collector
- Responsive Plus
- Subscribe2
- WordPress File Upload
- Web Accessibility By accessiBe
- Booking Package
- Classified Listing
- WP Google Map
- Logo Slider
- Modal Window
- Recipe Card Blocks for Gutenberg & Elementor
- s2Member
- Eventin
- YaySMTP and Email Logs
- Frontend Admin by DynamiApps
- Chat Widget
- WP Media Category Management
- WPO365 | MICROSOFT 365 GRAPH MAILER
- Poll Maker
- ProfileGrid
- WP Job Portal
- WPBot
- Wonder Video Embed
- Animated Text Block
- WPMobile.App
- Affiliate Links
- Assistant – Every Day Productivity Apps
- Icon List Block
- Place Order Without Payment for WooCommerce
- Contact Form Plugin
- YaySMTP
- Super Testimonials
- WP-Appbox
- Affiliate Coupons
- Counters Block
- Easy Charts
- Majestic Support
- Active Products Tables for WooCommerce
- Services Section block
- WP Yelp Review Slider
- Atarim
- Post Form
- Countdown Timer block
- Flexible Wishlist for WooCommerce
- mls® IDX Plugin
- Info Cards
- Market Exporter
- Pie Calendar
- Responsive Addons for Elementor
- Team Section block
- User Private Files
- Order Limit for WooCommerce
- Wired Impact Volunteer Management
- Pizza
- aBlocks
- YaySMTP
- System Dashboard
- Business Card Block
- Pago por Redsys
- WP Responsive Auto Fit Text
- AR for WordPress
- ClickWhale
- Popup Builder
- Front End Users
- Search with Typesense
- Easy Quotes
- EZ SQL Reports Shortcode Widget and DB Backup
- Wishlist
- WP Multistore Locator
- YaySMTP
- SpeedSize Image & Video AI-Optimizer
- Autoship Cloud for WooCommerce Subscription Products
- Easy Elementor Addons
- Tribulant Gallery Voting
- Scratch & Win
- Sticky Content
- Web Stories Enhancer
- Fast Flow
- Mini Course Generator
- Threepress
- Zigaform
- Ziggeo
- Zigaform
- Shopwarden
- Activity Log WinterLock
- Yay! Forms
- Easypromos Plugin
- MemorialDay
- igumbi Online Booking
- LTL Freight Quotes
- Small Package Quotes – Unishippers Edition
- LTL Freight Quotes – ABF Freight Edition
- LTL Freight Quotes – Old Dominion Edition
- Small Package Quotes – For Customers of FedEx
- LTL Freight Quotes – SAIA Edition
- LTL Freight Quotes – R+L Carriers Edition
- LTL Freight Quotes – SEFL Edition
- LTL Freight Quotes – TForce Edition
- FormCraft 3
- K Elements
- LTL Freight Quotes – Purolator Edition
- Pie Register Premium
- Small Package Quotes – USPS Edition
- Tourmaster
- Indeed Ultimate Learning Pro
- Uncode Core
- WooCommerce Food
How Do I Update WordPress?
Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.
Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.
Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.
After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.