WordPress Vulnerability Report — February 6, 2025
Since our last report, 345 vulnerabilities have been publicly disclosed. 197 of the vulnerable plugins and themes remain unpatched.
Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.
Along with poor user account security, vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates.
If this seems overwhelming, talk to us about a Website Care Plan.
WordPress Core
WordPress Themes
Themes With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should deactivate the themes(s).
- OnePress
- Storely
Themes With A Fix/Patch Available
Disclosed vulnerability(ies) have been patched. You should update to the latest version.
- SocialV
- Zox News
Looking for peace of mind and less tech stress?
Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.
Signup for one of our website care/management plans and get a tech-savvy team who are committed to your business.
Never worry about your website again.
Let Us Help YouWordPress Plugins
Plugins With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).
- Shortcodes and extra features for Phlox theme
- Meta Tag Manager
- Dynamic Conditions
- Hide Shipping Method For WooCommerce
- WP Project Manager
- Youzify
- Borderless
- WP Travel – Ultimate Travel Booking System, Tour Management Engine
- Payment Forms for Paystack
- Eventer
- Blog, Posts and Category Filter for Elementor
- Document Block
- Nirweb support
- Scroll Styler
- Vayu Blocks
- Broadstreet
- Job Board Manager
- Paytm Payment Donation
- Designer
- Internal Link Builder
- Music Press Pro
- Image Rotator
- All push notification for WP
- Linear
- CWD – Stealth Links
- HT Event
- Print PDF Generator and Publisher
- AIO Performance Profiler, Monitor, Optimize, Compress & Debug
- Appointment Buddy Widget By Accrete
- Notification Bar
- ABC Notation
- Altra Side Menu
- AnimateGL
- Ask Me Anything (Anonymously)
- Auto SEO
- BookPress
- Breaking News Ticker
- brodos.net Onlineshop Plugin
- Bulk Me Now!
- CanvasFlow
- Child Themes Helper
- Competition Form
- Connections
- Custom Comment Notifications
- A5 Custom Login Page
- Custom Links On Admin Dashboard Toolbar
- Delete Comments By Status
- Dental Optimizer Patient Generator App
- Dyn Business Panel
- Easy Chart Builder for WordPress
- Easy Related Posts
- Easy WP Tiles
- ECPay Ecommerce for WooCommerce
- ECT Home Page Products
- Embed RSS
- Embed Swagger UI
- Etsy Importer
- External Video For Everybody
- Facilita Form Tracker
- Fami Sales Popup
- Fantastic Elasticsearch
- Fare Calculator
- Status Updater
- FlashCounter
- Post Title (TypeWriter)
- FlexIDX Home Search
- Forge – Front-End Page Builder
- Frictionless
- Full Circle
- Fyrebox Quizzes
- GlobalQuran
- URL-Preview-Box
- Google Earth Embed
- WordPress Google Map Professional
- Graceful Email Obfuscation
- HTML5 chat
- Plugin A/B Image Optimizer
- Implied Cookie Consent
- Indeed API
- Infusionsoft Analytics
- InLocation
- Issuu Panel
- WP Vehicle Manager
- Event Kikfyre
- Kona Gallery Block
- Contact Form and Calls To Action by vcita
- Like dislike plus counter
- Link to URL / Post
- Links in Captions
- Live2DWebCanvas
- Login-box
- MagicForm
- Masy Gallery
- Munk Sites
- Music Sheet Viewer
- NextGen Cooliris Gallery
- Ni Sales Commission For WooCommerce
- NOTICE BOARD BY TOWKIR
- WordPress SEO Friendly Accordion FAQ
- OneStore Sites
- On Page SEO + Whatsapp Chat Button
- Optimate Ads
- Link Fixer
- Policy Genius
- Pop Up
- Post Carousel Slider
- Power Ups for Elementor
- Quote Comments
- Read More Copy Link
- Responsive iframe
- ReverbNation Widgets
- Royal Core
- RSS in Page
- Safe Ai Malware Protection for WP
- Social Share Buttons for WordPress
- Show notice or message on admin area
- Simple Auto Tag
- Simple Select All Text Box
- Simple User Profile
- Single-user-chat
- Slide Banners
- SlideDeck 1 Lite Content Slider
- Smart Countdown FX
- Smart DoFollow
- Social Links
- Songkick Concerts and Festivals
- Sports Rankings and Lists
- StageShow
- Starter Templates by FancyWP
- Stockdio Historical Chart
- Style Tweaker
- System Dashboard
- Tabulate
- Theasys
- Theme Options Z
- Traveler Code
- Traveler Layout Essential For Elementor
- Typer Core
- Listing
- User Messages
- User Role
- Media Manager for UserPro
- Vignette Ads
- VR-Frases
- WE – Testimonial Slider
- WizShop
- Wonder FontAwesome
- Woocommerce osCommerce Sync
- WordPress Signature
- WP Admin Custom Page
- WP Contact Form7 Email Spam Blocker
- WP Custom Post RSS FeedWP
- Dispensary
- WP Email Newsletter
- WP Finance
- WP Find Your Nearest
- WP Frontend Submit
- WP Image Uploader
- WP Keyword Monitor
- WP MediaTagger
- WP SimpleWeather
- WP Social Stream
- WP Spell Check
- WordPress Survey & Poll
- WP Triggers Lite
- WP doodlez
- Top Bar – PopUps – by WPOptin
- WPRadio
- Zalomení
- ZMSEO
- zStore Manager Basic
Plugins With A Fix/Patch Available
The vulnerability(ies) have been patched. You should update to the latest version.
- WPForms
- Ninja Forms
- Forminator Forms
- Orbit Fox by ThemeIsle
- The Plus Addons for Elementor
- WooCommerce
- Tracking Code Manager
- Import any XML, CSV or Excel File to WordPress
- Event Tickets and Registration
- HT Mega
- Jupiter X Core
- LearnPress
- Import and export users and customers
- Ninja Tables
- Drag and Drop Multiple File Upload for Contact Form 7
- Divi Torque Lite
- Better Find and Replace
- CF7 Google Sheets Connector
- NotificationX
- Contact Form & SMTP Plugin for WordPress by PirateForms
- Gwolle Guestbook
- Stratum – Elementor Widgets
- Divi Carousel Maker
- DSGVO All in one for WP
- Photo Gallery
- MP3 Audio Player
- Better Messages
- RegistrationMagic
- WP Customer Area
- Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings
- EAN Barcode Generator for WooCommerce: UPC, ISBN & GTIN Inventory
- Membership Plugin – Restrict Content
- WooCommerce Product Table Lite
- WS Form LITE – Drag & Drop Contact Form Builder for WordPress
- Contact Form by Bit Form
- MWB HubSpot for WooCommerce
- VikBooking Hotel Booking Engine & PMS
- WP Job Portal
- JS Help Desk
- WooCommerce Wishlist
- Survey Maker
- B Slider- Gutenberg Slider Block for WP
- MultiVendorX
- Product Blocks for WooCommerce
- Custom Product Tabs Lite for WooCommerce
- All Bootstrap Blocks
- Custom Related Posts
- Import WP
- Custom Login Page Styler
- Responsive Blocks
- aThemes Addons for Elementor
- Automatically Hierarchic Categories in Menu
- Multiple Page Generator Plugin – MPG
- Shared Files
- Food Menu
- Eventer
- Medical Addon for Elementor
- Order Export for WooCommerce
- Plethora Plugins Tabs + Accordions
- SendPulse Email Marketing Newsletter
- Ai Image Alt Text Generator for WP
- Post Form – Registration Form
- WordPress Contact Forms by Cimatti
- Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons
- CP Contact Form with PayPal
- Flexible Wishlist for WooCommerce
- Flexmls® IDX Plugin
- GoHero Store Customizer for WooCommerce
- Post Grid, Slider & Carousel Ultimate
- RapidLoad
- W2S
- iControlWP
- AI Infographic Maker
- Include Mastodon Feed
- WP Sessions Time Monitoring Full Automatic
- Product Table For WooCommerce
- ClickWhale
- Simple:Press Forum
- WP DataTable
- Alert Box Block
- ELEX WordPress HelpDesk & Customer Ticketing System
- Hesabfa Accounting
- SeatReg
- Site Search 360
- Uix Shortcodes
- WP Dynamics CRM for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms
- Disable Elementor Editor Translation
- OPSI Israel Domestic Shipments
- Export Order, Product, Customer & Coupon for WooCommerce to Google Sheets
- Alex Reservations: Smart Restaurant Booking
- Listings for Appfolio
- Tags to Keywords
- WP BASE Booking of Appointments, Services and Events
- Awesome Responsive Photo Gallery
- Target Video Easy Publish
- Clinked Client Portal
- DigiTimber cPanel Integration
- Video & Photo Gallery for Ultimate Member
- Media Downloader
- Morkva UA Shipping
- Content Cloner
- Unlimited Page Sidebars
- WC Affiliate
- WP Post List Table
- Table Editor
- Dynamic URL SEO
- EthereumICO
- MailUp Auto Subscription
- WPBookit
- Infility Global
- Philantro – Donations and Donor Management
- Bilingual Linker
- Ticketmeo – Sell Tickets – Event Ticketing
ShopSite - eHive Objects Image Grid
- Awesome Event Booking
- Boom Fest
- Admin and Site Enhancements (ASE) Pro
- BoomBox Theme Extensions
- Elementor Pro
- ElementsKit Pro
- Goodlayers Core
- Oshine Modules
- Tourmaster
- ThemeREX Addons
- WooCommerce Customers Manager
- MultiLoca – WooCommerce Multi Locations Inventory Management
- WooCommerce Support Ticket System
- WP ALL Export Pro
- WP All Import Pro
- WPJobBoard
How Do I Update WordPress?
Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.
Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.
Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.
After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.