WordPress Vulnerability Report — January 29, 2025
Since our last report, 234 vulnerabilities have been publicly disclosed. 44 of the vulnerable plugins and themes remain unpatched.
Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.
Along with poor user account security, vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates.
If this seems overwhelming, talk to us about a Website Care Plan.
WordPress Core
WordPress Themes
Themes With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should deactivate the themes(s).
- Bootstrap Ultimate
- RealHomes
Themes With A Fix/Patch Available
Disclosed vulnerability(ies) have been patched. You should update to the latest version.
- AdForest
- Avada
- Betheme
- Houzez
- uDesign
- Zox News
Looking for peace of mind and less tech stress?
Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.
Signup for one of our website care/management plans and get a tech-savvy team who are committed to your business.
Never worry about your website again.
Let Us Help YouWordPress Plugins
Plugins With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).
- Product Size Charts Plugin for WooCommerce
- Youzify
- Scroll Styler
- Broadstreet
- Designer – Elementor Addons
- Internal Link Builder
- Estatebud
- Linear
- 1003 Mortgage Application
- ABC Notation
- Altra Side Menu
- AnyRoad
- Ask Me Anything (Anonymously)
- Automate Hub
- BMLT Meeting Map
- brodos.net Onlineshop Plugin
- Connections
- Dental Optimizer Patient Generator App
- Dyn Business Panel
- Easy Real Estate
- Etsy Importer
- Fare Calculator
- FlashCounter
- Post Title (TypeWriter)
- Full Circle
- Issuu Panel
- Masy Gallery
- NOTICE BOARD BY TOWKIR
- WordPress SEO Friendly Accordion FAQ
- Post Carousel Slider
- Power Ups for Elementor
- PPO Call To Actions
- SEO Blogger to WordPress Migration
- Social Share Buttons for WordPress
- WP All Import Pro
- WP Contact Form7 Email Spam Blocker
- WP Triggers Lite
Plugins With A Fix/Patch Available
The vulnerability(ies) have been patched. You should update to the latest version.
- Really Simple Security
- Starter Templates
- Popup Maker
- The Events Calendar
- Page Builder Gutenberg Blocks
- ExactMetrics
- Gutenberg Blocks with AI by Kadence WP
- FluentSMTP
- WP Go Maps (formerly WP Google Maps)
- Call Now Button
- Page Builder: Pagelayer
- Post Duplicator
- Admin and Site Enhancements (ASE)
- Prime Slider
- Stackable
- String locator
- LearnPress
- List category posts
- Nested Pages
- Import and export users and customers
- WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels
- Easy Digital Downloads
- Better Find and Replace
- WP-Polls
- Social Share, Social Login and Social Comments Plugin
- Carousel Maker for Divi
- WP Visitor Statistics (Real Time Traffic)
- Appointment Booking Calendar Plugin and Scheduling Plugin
- Icegram Engage – Ultimate WP Popup Builder, Lead
- Generation, Optins, and CTA
- IP2Location Country Blocker
- RomethemeKit For Elementor
- Simple Download Monitor
- Thim Elementor Kit
- PPOM – Product Addons & Custom Fields for WooCommerce
- Contact Form Email
- WP Customer Area
- GamiPress
- AI Power: Complete AI Pack
- Contact Form 7 Widget For Elementor Page Builder & Gutenberg Blocks
- AI Chatbot for WordPress
- JSM Show Post Metadata
- Link Library
- Modal Window – create popup modal window
- Membership Plugin
- Internal Links Manager
- WooCommerce Product Table Lite
- Countdown Timer
- Export All Posts, Products, Orders, Refunds & Users
- WP VR
- Essential Real Estate
- Contact Form by Bit Form: Multi Step Form, Calculation
- Contact Form, Payment Contact Form & Custom
- Contact Form builder
- Sticky Buttons
- VikBooking Hotel Booking Engine & PMS
- Product Carousel Slider & Grid Ultimate for WooCommerce
- WP Hotel Booking
- Xagio SEO
- Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection)
- Side Menu Lite
- Super block slider
- Themify Builder
- Button Generator
- MultiVendorX
- ElementInvader Addons for Elementor
- Variation Swatches for WooCommerce
- Custom Product Tabs Lite for WooCommerce
- Import WP
- Popup Box: Create Popups Easily
- RSVP and Event Management
- Premium Packages – Sell Digital Products Securely
- XML for Google Merchant Center
- HelloAsso
- Multiple Page Generator Plugin – MPG
- Patreon WordPress
- Paytium: Mollie payment forms & donations
- Ultimate Coming Soon & Maintenance
- Auction Nudge – Your eBay on Your Site
- Chained Quiz
- Counter Box: Add Engaging Countdowns, Timers & Counters to Your WordPress Site
- Email Subscription Popup
- Social Proof Popups & Real-Time Notifications
- Plethora Plugins Tabs + Accordions
- Comment Edit Core
- Product Table by WBW
- WooCommerce Quick View
- Print Labels with Barcodes. Create price tags, product labels, order labels for WooCommerce
- Post Grid Master
- Visual Website Collaboration, Feedback & Project Management
- Bubble Menu – Sticky Navigation with Floating Button Menu Solution
- Event post
- Flexmls® IDX Plugin
- WP Fast Total Search
- KB Support – Customer Support Ticket & Helpdesk Plugin, Knowledge Base Plugin
- GDPR CCPA Compliance & Cookie Consent Banner
- GoHero Store Customizer for WooCommerce
- Post Grid, Slider & Carousel Ultimate
- Responsive Addons for Elementor
- Spexo Addons for Elementor
- Save as PDF Plugin by Pdfcrowd
- Tainacan
- Tamara Checkout
- Toocheke Companion
- Tourfic
- WooCommerce Cloak Affiliate Links
- MDTF – Meta Data and Taxonomies Filter
- 12 Step Meeting List
- Booking Calendar Contact Form
- Easy YouTube Gallery
- FireCask Like & Share Button
- Wishlist for WooCommerce
- Create with Code
- Job Board Manager
- Ketchup Shortcodes
- Listamester
- WP Google Street View (with 360° virtual tour) & Google maps + Local SEO
- WP Multi Store Locator
- Form Builder CP
- MachForm Shortcode
- Picture Gallery – Frontend Image Uploads, AJAX Photo List
- SERPed.net
- aDirectory
- All Embed
- Gutenberg Blocks and Page Layouts
- WP Dynamics CRM for Contact Form 7, WPForms, Elementor, Formidable and Ninja Forms
- RSVPMaker
- Build Private Store For Woocommerce
- WP Duplicate – WordPress Migration Plugin
- Magic the Gathering Card Tooltips
- ShMapper by Teplitsa
- Taxonomy/Term and Role based Discounts for WooCommerce
- Lifetime free Drag & Drop Contact Form Builder for WordPress VForm
- Advanced Notifications
- Blur Text
- Target Video Easy Publish
- Bug Library
- Linet ERP-Woocommerce Integration Plugin
- Morkva UA Shipping
- Orbisius Simple Notice
- People Lists
- Precious Metals Charts and Widgets for WordPress
- Roi Calculator
- Show/Hide Shortcode
- Simple Downloads List
- FV Thoughtful Comments
- WC Affiliate
- WP-BibTeX
- PDF Invoices for WooCommerce + Drag and Drop Template Builder
- Dynamic URL SEO
- Restrict Anonymous Access
- WPBookit
- Simple Gallery with Filter
- Bilingual Linker
- Cliptakes
- FAQ Builder AYS
- Radius Blocks
- wp-greet
- Boom Fest
- Caching Compatible Cookie Opt-In and JavaScript
- Subscription DNA®
- KBucket: Your Curated Content in WordPress
ReviewsTap - Admin and Site Enhancements (ASE) Pro
- BMLT Meeting Map
- Bridge Core
- Fusion Builder
- JetElements For Elementor
- Oshine Modules
- LearnDash LMS
- ThemeREX Addons
- VideoWhisper Live Streaming Integration
- WPBot Pro WordPress Chatbot
- WPJobBoard
How Do I Update WordPress?
Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.
Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.
Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.
After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.