Digital Chicks People Focused Tech Powered Logo

WordPress Vulnerability Report —July 16, 2025

Since our last report, 109 vulnerabilities have been publicly disclosed. 44 of the vulnerable plugins and themes remain unpatched.

Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.

Along with poor user account security, vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates.

If this seems overwhelming, talk to us about a Website Care Plan.

WordPress Core

No vulnerabilities disclosed!

WordPress 6.8.2 has been released! This maintenance release includes fixes for 35 bugs throughout Core and the Block Editor, addressing issues affecting multiple areas of WordPress.

WordPress Themes

Themes With No Fix/Patch Available

  • Electrician
  • Easy Video Player
  • Hillter
  • Invico
  • ListingEasy
  • Nuss
  • Ofiz
  • Sala
  • Yogi

Themes With A Fix/Patch Available

Disclosed vulnerability(ies) have been patched. You should update to the latest version.

  • Alone
  • Noisa
  • Nokri
  • Traveler
  • WoodMart

Looking for peace of mind and less tech stress?​

Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.

Signup for one of our website care/management plans and get a tech-savvy team who are committed to your business.

Never worry about your website again.

Let Us Help You

WordPress Plugins

Plugins With No Fix/Patch Available

Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).

  • URL Shortener
  • WP Pipes
  • Contact Form 7 Editor Button
  • Tennis Court Bookings
  • Dot html,php,xml etc pages
  • SMu Manual DoFollow
  • Media Folder
  • Pay with Contact Form 7
  • Infility Global
  • Ultimate Push Notifications
  • Torod
  • WPJobBoard
  • WP-BusinessDirectory
  • CoSchool LMS
  • Pakke Envíos
  • Amazon Affiliates Addon for WPBakery Page Builder
  • GoZen Forms
  • WPGYM
  • WP Human Resource Management
  • LoginWP – Pro
  • Medical Prescription Attachment
  • Plugin for WooCommerce
  • Premium SEO Pack
  • Profiler
  • The E-Commerce ERP
  • Multi-language Responsive Contact Form
  • Short URL
  • Simple Featured Image
  • smart SEO
  • Super Store Finder
  • Responsive Coming Soon Landing Page / Holding Page
  • WordPress Auto Spinner
  • WP Firebase Push Notification

Plugins With A Fix/Patch Available

The vulnerability(ies) have been patched. You should update to the latest version.

  • Essential Addons for Elementor
  • Contact Form 7 Database Addon
  • Gutenberg Blocks with AI by Kadence WP
  • Newsletter
  • SureForms
  • AI Engine
  • FooGallery
  • Strong Testimonials
  • Events Manager
  • WPC Smart Compare for WooCommerce
  • Companion Auto Update
  • FunnelKit
  • Gwolle Guestbook
  • WP Lightbox 2
  • WCFM
  • wpForo Forum
  • GeoDirectory
  • HT Contact Form Widget
  • PowerFolio
  • ProfileGrid
  • RSFirewall!
  • Contact Form Plugin
  • Internal Linking of Related Contents
  • Lana Downloads Manager
  • Wishlist for WooCommerce
  • Custom Post Carousels with Owl
  • Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery
  • Friends
  • Product XML Feed Manager for WooCommerce
  • WP Register Profile With Shortcode
  • Easy restaurant menu manager
  • PW WooCommerce On Sale!
  • Sharable Password Protected Posts
  • Hostel
  • Guest Support
  • GB Forms DB
  • Site Chat on Telegram
  • WPBookit
  • BeeTeam368 Extensions
  • CSS3 Compare Pricing Tables for WordPress
  • JetEngine
  • HTML5 Radio Player
  • Modern Events Calendar Lite
  • Order Delivery Date for WP e-Commerce
  • Support Board
  • WP File Download

How Do I Update WordPress?

Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.

Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.

Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.

After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.

Tagged