WordPress Vulnerability Report — January 15, 2025
Since our last report, 374 vulnerabilities have been publicly disclosed. 248 of the vulnerable plugins and themes remain unpatched.
Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.
Along with poor user account security, vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates.
If this seems overwhelming, talk to us about a Website Care Plan.
WordPress Core
No vulnerabilities disclosed!
WordPress Themes
Themes With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should deactivate the themes(s).- my money
- Power Mag
- StorePress
- Aports
- Boliin
- Constix
- Conult
- Fioxen
- TheFude
- Gowilds
- Halpes
- Homey
- Js O3 Lite
- Lestin
- Modins
- moseter
- my depressive
- my engine
- offset writing
- Orgarium
- Paroti
- Pisole
- Qempo
- Qizon
- Sominx
- Tevily
- welowe
- Zilom
Themes With A Fix/Patch Available
Disclosed vulnerability(ies) have been patched. You should update to the latest version.
- AdForest
- Aurum
WordPress Plugins
Plugins With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).- Smart Custom Fields
- Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor
- Link Whisper Free
- WP Visitor Statistics (Real Time Traffic)
- Thim Elementor Kit
- Duplicate Post, Page and Any Custom Post
- TemplatesNext ToolKit
- WP FullCalendar
- CoDesigner
- Product Table for WooCommerce by CodeAstrology
- Hash Elements
- PayU CommercePro Plugin
- WP Travel
- Button Block
- Design for Contact Form 7 Style WordPress Plugin
- CubeWP Forms
- Widgetize Pages Light
- Food Store
- School Management System
- Post Grid Master
- Bold pagos en linea
- Bus Ticket Booking with Seat Reservation
- Hero Banner Ultimate
- Typing Text
- FancyPost
- Ukrposhta
- Build App Online
- CLUEVO LMS, E-Learning Platform
- WordLift
- SMSA Shipping (official)
- WP Youtube Gallery
- Chatroll Live Chat
- Deliver via Shipos for WooCommerce
- SimplyRETS Real Estate IDX
- ThePerfectWedding Widget
- Rezgo Online Booking
- Course Booking System
- Horoscope And Tarot
- Neon Product Designer
- WR Price List Manager For Woocommerce
- YOGO Booking
- Responsive jQuery Slider
- WooCommerce Digital Content Delivery
- ARS Affiliate Page Plugin
- Gallery and Lightbox
- Infility Global
- Chative Live chat and Chatbot
- 1003 Mortgage Application
- 3DVieweronline
- 4ECPS Web Forms
- Accordion Slider Lite
- AddFunc Mobile Detect
- Affiliate Disclosure Statement
- Elementor AI Addons
- AI Scribe
- Aklamator INfeed
- Alpha Price Table For Elementor
- Arcade Ready
- Asgard Security Scanner
- Background Control
- Backlink Monitoring Manager
- Better User Shortcodes
- Biltorvet Dealer Tools
- Bizapp for WooCommerce
- Booking and Rental Manager
- BP Profile Shortcodes Extra
- BU Section Editing
- Candifly
- Chat Support for Viber
- ClickDesigns
- Common Ninja
- Contact Form Master
- Custom DataBase Tables
- Dominion – Domain Checker for WPBakery
- Donation Block For PayPal
- S3Player – WooCommerce & Elementor Integration
- Admin debug wordpress – enable debug
- eDoc Easy Tables
- Emailing Subscription
- Enable Accessibility
- Essential WP Real Estate
- WP Delete Post Copies
- FAT Event Lite
- Featured Page Widget
- Files Download Delay
- Formaloo Form Maker
- GatorMail SmartForms
- GDY Modular Content
- Genesis Style Shortcodes
- Geo Content
- Google Maps Travel Route
- Grid Accordion Lite
- GS Insever Portfolio
- Help Scout
- Homey Login Register
- Host PHP Info
- Huurkalender WP
- Icons Enricher
- ICS Button
- iframe to embed
- Inline Tweets
- Instabot
- CF Internal Link Shortcode
- JK Html To Pdf
- jQuery TwentyTwenty
- Justified Image Gallery
- KNR Author List Widget
- Laika Pedigree Tree
- LazyLoad Background Images
- ldap_login_password_and_role_manager
- linkID
- List Pages at Depth
- Live Flight Radar
- Financial Stocks & Crypto Market Data Plugin
- LucidLMS
- WhatsApp click to chat
- Marketplace Items
- Muslim Prayer Time-Salah/Iqamah
- mcjh button shortcode
- Member Access
- Metadata SEO
- Meteor Slides
- MIMO Woocommerce Order Tracking
- Mind Doodle Visual Sitemaps & Tasks
- MindValley Super PageMash
- Muzaara Google Ads Report
- NC Wishlist for Woocommerce
- Newsletter2Go
- PayGreen Payment Gateway
- Perfect Portal Widgets
- PIXNET
- Post And Page Reactions
- PostLists
- Prayer Times Anywhere
- Pretty Url
- Qr Code and Barcode Scanner Reader
- Quote Tweet
- ResAds
- Responsive FlipBook
- RightMessage WP
- RRAddons for Elementor
- School Management System
- Same but Different
- Saoshyant Page Builder
- Scan External Links
- Searchie
- Sell Digital Downloads
- Sell Media
- Sellsy
- SEO LAT Auto Post
- SEO Bulk Editor
- seo-keywords
- Show Google Analytics widget
- Simple Add Pages or Posts
- Simple Photo Sphere
- SingSong
- Site PIN
- Slides & Presentations
- Slider Pro Lite
- Smart Agenda
- SmartEmailing
- Smoothness Slider Shortcode
- Social Rocket
- Spacer
- Legacy Player
- ST Gallery WP
- SweepWidget Contests, Giveaways, Photo Contests, Competitions
- Tabs Shortcode
- Themes Coder
- TCBD Auto Refresher
- Timeline Designer
- Toggles Shortcode and Widget
- TRUSTist REVIEWer
- TubePress.NET
- Ultimate Image Hover Effects
- Popup
- Unlimited Theme Addon For Elementor and WooCommerce
Plugins With A Fix/Patch Available
The vulnerability(ies) have been patched. You should update to the latest version.
- UpdraftPlus
- W3 Total Cache
- Page Builder by SiteOrigin
- PixelYourSite
- Royal Elementor Addons and Templates
- Happy Addons for Elementor
- Gutenberg Blocks with AI by Kadence
- Post SMTP
- InfiniteWP Client
- Post Duplicator
- Orbit Fox
- Dear Flipbook
- Element Pack Elementor Addons
- Essential Blocks
- GiveWP
- Modula Image Gallery
- Pods
- Jupiter X Core
- Email Subscribers
- WP Booking Calendar
- Category Posts Widget
- User Profile Builder
- Photo Gallery, Images, Slider in Rbs Image Gallery
- Sina Extension for Elementor
- Greenshift
- Themesflat Addons For Elementor
- WP Database Backup
- HTML5 Video Player
- Master Addons
- SureForms
- Appointment Booking Calendar Plugin and Scheduling Plugin
- Icegram Engage
- WordPress File Upload
- 140+ Widgets | Xpro Addons For Elementor
- Passster
- Export Import Menus
- Paid Membership Subscriptions
- Ultimate Gift Cards for WooCommerce
- WP Job Portal
- Author Avatars List/Block
- Auto iFrame
- ElementInvader
- SMS Alert Order Notifications
- Shopping Cart & eCommerce Store
- Booking calendar, Appointment Booking System
- Button Block
- Garden Gnome Package
- Quill Forms
- RSVP and Event Management
- News Ticker Widget for Elementor
- Property Hive
- SKT Page Builder
- SpeakOut! Email Petitions
- Easy Form Builder
- WordPress CRM, Email & Marketing Automation for WordPress
- MyBookTable Bookstore
- WordPress form builder plugin for contact forms, surveys and quizzes
- WC Price History
- WPBITS Addons For Elementor Page Builder
- WP Wand
- AI Blog Post & Article with 20X Speed
- AI WP Writer
- Black Widgets For Elementor
- ChatBot Conversational Forms
- Coupon X
- JoomSport
- MT Addons for Elementor
- PDF Catalog Woocommerce
- MDTF – Meta Data and Taxonomies Filter
- WordPress Webinar Plugin
- Custom Field For WP Job Manager
- MAS Elementor
- Advanced Product Information for WooCommerce
- Content Blocks Builder
- AI for SEO
- ClickWhale
- F4 Post Tree
- Tock Widget
- Trackserver
- Service Box
- Skill Bars
- WP Mailster
- Zephyr Admin Theme
- BWD Elementor Addons
- Coupon Plugin
- Responsive Flickr Slideshow
- Solar Wizard Lite
- Transporters.io
- Bootstrap Blocks for WP Editor v2
- Free WooCommerce Theme 99fy Extension
- CC Canadian Mortgage Calculator
- Slotti Ajanvaraus
- Store credit / Gift cards for woocommerce
- Email Templates Customizer for WordPress
- Boot-Modal
- WPBookit
- Norse Rune Oracle Plugin
- Shipping via Planzer for WooCommerce
- Error Log Viewer By WP Guru
- Hive Support
- Timeline Pro
- App Embed
- MIPL WC Multisite Sync
- SEMA API
- Surbma | Premium WP
- Booking Calendar Pro
- Cost Calculator Builder Pro
- Croma Music
- Gift Cards for WooCommerce Pro
- Tourmaster
Looking for peace of mind and less tech stress?
Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.
Signup for one of our website care/management plans and get a tech-savvy team who are committed to your business.
Never worry about your website again.
Let Us Help YouHow Do I Update WordPress?
Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.
Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.
Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.
After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.