WordPress Vulnerability Report — July 24, 2024
WordPress Core
Since last week, 93 new vulnerabilities emerged in the WordPress ecosystem including 87 plugins and 6 themes. 21 of the vulnerable plugins and themes remain unpatched, so run those updates as soon as possible.
Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.
Along with poor user account security, vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates. If this seems overwhelming, talk to us about a Website Care Plan.
No vulnerabilities disclosed!
WordPress Themes
Themes With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should switch the theme if no fix is forthcoming.- CoziPress
- Himalayas
- ListingPro
- Zenon Lite
Themes With A Fix/Patch Available
Disclosed vulnerability(ies) have not been patched.WordPress Plugins
Plugins With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).
- Timetable and Event Schedule by MotoPress
- Smartsupp
- Pretty Simple Popup Builder
- Booking Ultra Pro
- Easy Testimonials
- Keydatas
- Light Poll
- ListingPro
- RegLevel
- SVG Support
- Telegram Bot & Channel
- Timeline Event History
Plugins With A Fix/Patch Available
The vulnerability(ies) have been patched. You should update to the latest version.
- WP Mail SMTP by WPForms
- ElementsKit Elementor addons
- Redux Framework
- Security Optimizer
- WPS Hide Login
- Photo Gallery, Sliders, Proofing and Themes
- Element Pack Elementor Addons
- Conditional Fields for Contact Form 7
- GiveWP – Donation Plugin and Fundraising Platform
- Schema & Structured Data for WP & AMP
- CTX Feed – WooCommerce Product Feed Manager Plugin
- Mercado Pago payments for WooCommerce
- HUSKY – Products Filter Professional for WooCommerce
- Email Subscribers by Icegram Express
- Brizy – Page Builder
- AI Engine
- Premium Portfolio Features for Phlox theme
- Getwid – Gutenberg Blocks
- Image Hover Effects – Elementor Addon
- RSS Aggregator
- Gutenverse – Gutenberg Blocks
- FV Flowplayer Video Player
- Icegram Engage
- WP Event Manager
- WordPress File Upload
- Appointment Booking Calendar Plugin and Online Scheduling Plugin
- BSK PDF Manager
- CM Popup Plugin for WordPress
- Language Translate Widget for WP
- JetWidgets for Elementor and WooCommerce
- Leaflet Maps Marker
- MasterStudy LMS WordPress Plugin
- UiPress lite
- Event Manager, Events Calendar, Tickets, Registrations
- SchedulePress
- Backup, Restore and Migrate WordPress Sites With the XCloner Plugin
- Arconix FAQ
- HTML Forms – Simple WordPress Forms Plugin
- YITH Essential Kit for WooCommerce #1
- Arconix Shortcodes
- AI ChatBot for WordPress – WPBot
- WP QuickLaTeX
- Livemesh Addons for Beaver Builder
- Cooked – Recipe Management
- AForms
- Insert or Embed Articulate Content into WordPress
- Addonify – Quick View For WooCommerce
- Visual Website Collaboration, Feedback & Project Management
- Glossary
- The Pack Elementor addons
- Web and WooCommerce Addons for WPBakery Builder
- Great Restaurant Menu WP
- Duplica – Duplicate Posts, Pages, Custom Posts or Users
- WP Fast Total Search
- MaxiBlocks
- Custom Query Blocks
- Filter & Grids
- FormLift for Infusionsoft Web Forms
- ArtPlacer Widget
- Bug Library
- Community Events
- PZ Frontend Manager
- Ultimate Addons for WPBakery Page Builder
- WP eStore
- CopySafe Web Protection
- WP GoToWebinar
- WPForms User Registration
Looking for peace of mind and less tech stress?
Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.
Signup for one of our website care/management plans and get a tech-savvy team who are committed to your business.
Never worry about your website again.
Let Us Help YouHow Do I Update WordPress?
Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.
Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.
Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.
After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.