WordPress Vulnerability Report — July 17, 2024
Since last week, 300 new vulnerabilities emerged in the WordPress ecosystem including 285 plugins and 15 themes. 132 of the vulnerable plugins and themes remain unpatched, so run those updates as soon as possible.
Along with poor user account security, vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates.
Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.
WordPress Core
No vulnerabilities disclosed!
WordPress Themes
Themes With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should switch the theme if no fix is forthcoming.
- Oceanic
- OnePress
- Popularis Verse
- Responsive Mobile
- counterpoint
- i-amaze
- i-transform
- Jobmonster
- Patricia Blog
- Patricia Lite
- Point
- SmartMag
- SociallyViral
Themes With A Fix/Patch Available
Disclosed vulnerability(ies) have been patched. You should update to the latest version.- BuddyBoss Theme
WordPress Plugins
Plugins With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).
- Genesis Blocks
- Search & Replace
VK All in One Expansion Unit - Titan Anti-spam & Security
- Matomo Analytics
- Meks Smart Author Widget
- Packlink PRO shipping module
- ReCaptcha Integration for WordPress
- Generate PDF using Contact Form 7
- Panda Video
- Realtyna Organic IDX plugin + WPL Real Estate
- Timeline Module for Beaver Builder
- WP User Switch
- Admin Dashboard RSS Feed
- Google Adsense & Banner Ads by AdsforWP
- AdPush
- Advanced AJAX Page Loader
- Advanced post slider
- EleForms
- Amazing Hover Effects
- Animated Typed JS Shortcode
- Appmaker
- Arkhe Blocks
- Attachment File Icons
- Auto Featured Image (Auto Post Thumbnail)
- Booking Ultra Pro
- Caxton – Create Pro page layouts in Gutenberg
- Cliengo – Chatbot
- CodePen Embedded Pens Shortcode
- codoc
- Comment Images Reloaded
- Animated Rotating Words
- WPCS
- Default Thumbnail Plus
- DirectoryPress
- Download Button for Elementor
- Easy Pixels
- EazyDocs
- Pricing Table
- Power BI Embedded for WordPress
- Event post
- EventON
- Events Calendar for Google
- ExS Widgets
- Extensions for Elementor
- XPlainer
- File Manager Advanced Shortcode
- WordPress Form Builder Plugin
- Fusion
- SCSS Happy Compiler
- HitPay Payment Gateway for WooCommerce
- Import Spreadsheets from Microsoft Excel
- IQ Testimonials
- WooCommerce Report
- Job Board Manager
- Just Custom Fields
- Laposta
- Light Poll
- Magical Addons For Elementor
- Magical Posts Display
- MBE eShip
- Master Popups
- Meks Video Importer
- URL Shortener by MyThemeShop
- Olive One Click Demo Import
- OSM – OpenStreetMap
- Payflex Payment Gateway
- Pie Register
- Plugin Notes Plus
- Post Layouts for Gutenberg
- Product Designer
- Plum: Spin Wheel & Email Pop-up
- Coming Soon
- REVIEWS.io
- ScrollTo Bottom
- ScrollTo Top
- Seraphinite Post .DOCX Source
- Simple Alert Boxes
- Simple Post Notes
- Simple Responsive Slider
- Sky Addons for Elementor
- GutSlider – All in One Block Slider
- Tabs For WPBakery Page Builder
- Taggbox
- TOCHAT.BE
- UltraAddons Elementor Lite
- User Activity Log Pro
- WappPress
- Webico Slider Flatsome Addons
- LearnDash LMS
- Woocommerce OpenPos
- WooCommerce Predictive Search
- Change From Email
- WP GoToWebinar
- Multisite Content Copier/Updater
- WP2Speed Faster
- Recipe Maker For Your Food Blog from Zip Recipes
- Zoho Campaigns
Plugins With A Fix/Patch Available
The vulnerability(ies) have been patched. You should update to the latest version.
- Duplicator – Migration & Backup Plugin
- WPS Hide Login
- Premium Addons for Elementor
- Easy Table of Contents
- Photo Gallery, Sliders, Proofing and Themes
- SEOPress
- Unlimited Elements For Elementor
- User Feedback
- Feeds for YouTube
- HT Mega – Absolute Addons For Elementor
- Inline Related Posts
- WordPress Button Plugin MaxButtons
- HUSKY – Products Filter Professional for WooCommerce
- EmbedPress
- Event Tickets and Registration
- Tutor LMS – eLearning and online course solution
- Brizy – Page Builder
- YITH WooCommerce Ajax Product Filter
- Premium Portfolio Features for Phlox theme
- Image Hover Effects – Elementor Addon
- Internal Link Juicer: SEO Auto Linker for WordPress
- Ultimate Blocks – WordPress Blocks Plugin
- RSS Aggregator
- Ditty – Responsive News Tickers, Sliders, and Lists
- PowerPress Podcasting plugin by Blubrry
- Qi Blocks
- Quiz and Survey Master (QSM)
- Social Media Widget
- FULL – Cliente
- Index WP MySQL For Speed
- Master Addons
- Seriously Simple Podcasting
- Team Members
- WP Popups – WordPress Popup builder
- Login by Auth0
- Branda – White Label WordPress, Custom Login Page Customizer
- Image Photo Gallery Final Tiles Grid
- Form Vibes – Database Manager for Forms
- MP3 Audio Player
- Giveaways and Contests by RafflePress
- Secure Copy Content Protection and Content Locking
- Slider by 10Web – Responsive Image Slider
- SmartCrawl WordPress SEO checker, SEO analyzer, SEO optimizer
- User Submitted Posts – Enable Users to Submit Posts from the Front End
- Wallet for WooCommerce
- Wholesale Suite
- WP Accessibility Helper (WAH)
- WP Event Manage
- WordPress File Upload
- Backup and Staging by WP Time Capsule
- Goftino
- Gum Elementor Addon
- Link Library
- Metorik – Reports & Email Automation for WooCommerce
- Product Enquiry for WooCommerce
- WP Photo Album Plus
- SchedulePress
- WP Travel Engine – Tour Booking Plugin – Tour Operator Software
- Backup, Restore and Migrate WordPress Sites With the XCloner Plugin
- WP ERP
- If-So Dynamic Content Personalization
- Get Use APIs – JSON Content Importer
- iPanorama 360
- Social Sharing Plugin – Kiwi
- ProfileGrid
- Contact Form by Bit Form
- InstaWP Connect
- Send Users Email
- WP Links Page
- WP QuickLaTeX
- CM WordPress Search And Replace Plugin
- ElementInvader Addons for Elementor
- MStore API
- Typebot
- VikRentCar Car Rental Management System
- Watu Quiz
- Zoho CRM Lead Magnet
- AForms
- Contact Form, Survey & Popup Form Plugin for WordPress
- ConeBlog – Elementor Blog Widgets
- Insert or Embed Articulate Content into WordPress
- oik
- Spiffy Calendar
- Wallet System for WooCommerce
- Chained Quiz
- Featured Image Generator
- Glossary
- JSON API User
- MakeStories (for Google Web Stories)
- Media Hygiene: Remove or Delete Unused Images and More!
- Product Delivery Date for WooCommerce – Lite
- Simple Popup Plugin
- SKT Skill Bar
- SlingBlocks
- SVG Block
- Web and WooCommerce Addons for WPBakery Builder
- Product Table by WBW
- WP Event Aggregator
- Academy LMS
- Blog, Posts and Category Filter for Elementor
- Bradmax Player
- CM Email Registration Blacklist and Whitelist
- WP Fast Total Search
- GD Rating System
- Gravity Forms: Multiple Form Instances
- FancyPost
- Quotes and Tips by BestWebSoft
- Image Optimizer, Resizer and CDN – Sirv
- Squelch Tabs and Accordions Shortcodes
- Team Manager
- WPBITS Addons For Elementor Page Builder
- BerqWP
- Barcode Scanner and Inventory manager. POS (Point of Sale)
- DN Footer Contacts
- Smart Image Gallery
- Tournamatch
- Bug Library
- Embed Peertube Playlist
- Website Content in Page or Post
- Hostel
- WP Announcement
- OpenPGP Form Encryption for WordPress
- WP Total Branding
- SULly
- Simple Video Directory
- Support SVG
- BSK PDF Manager
- Contact Form 7 Summary and Print
- EventON
- File Manager Advanced Shortcode
- Houzez CRM
- Houzez Theme – Functionality
- Calendar.online / Kalender.digital
- Modern Events Calendar
- Modern Events Calendar Lite
- Moloni
- PayPlus Payment Gateway
- ReDi Restaurant Reservation
- Seraphinite Accelerator (Full, premium)
- Shortcodes Ultimate Pro
- FormFlow: WhatsApp & Social Form Builder for Leads
- Swift Framework Page Builder
- Uncanny Automator Pro
- Affiliate Manager
- WP eStore
- WP eMember
- WP GoToWebinar
- Zephyr Project Manager
Looking for peace of mind and less tech stress?
Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.
Signup for one of our website care/management plans and get a tech-savvy team who are committed to your business.
Never worry about your website again.
Let Us Help YouHow Do I Update WordPress?
Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.
Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.
Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.
After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.