WordPress Vulnerability Report — July 31, 2024

Since last week, 80 new vulnerabilities emerged in the WordPress ecosystem including 75 plugins and 5 themes. 25 of the vulnerable plugins and themes remain unpatched, so run those updates as soon as possible. Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses. Along with poor user account security, vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates. If this seems overwhelming, talk to us about a Website Care Plan.

WordPress Core

No vulnerabilities disclosed!

WordPress Themes

Themes With No Fix/Patch Available

Disclosed vulnerability(ies) have not yet been patched. You should switch the theme if no fix is forthcoming.
  • Himalayas
  • Edubin
  • ListingPro

Themes With A Fix/Patch Available

Disclosed vulnerability(ies) have not been patched.

WordPress Plugins

Plugins With No Fix/Patch Available

Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).

  • Timetable and Event Schedule
  • Pretty Simple Popup Builder
  • Add Admin CSS
  • Add Admin JavaScript
  • Admin Post Navigation
  • Admin Trim Interface
  • Aramex Shipping WooCommerce
  • Flipbox Builder
  • IgnitionDeck
  • Intelligence
  • ListingPro
  • Master Currency WP
  • Media.net Ads Manager
  • One Click Close Comments
  • ParityPress
  • Tutor LMS – Migration Tool
  • Ultimate Auction

Plugins With A Fix/Patch Available

The vulnerability(ies) have been patched. You should update to the latest version.

  • LiteSpeed Cache
  • Redux Framework
  • Ninja Forms
  • NextGEN Gallery
  • CoBlocks
  • Contact Form Plugin by Fluent Forms
  • Happy Addons for Elementor
  • Royal Elementor Addons and Templates
  • AMP for WP
  • Hide My WP Ghost
  • Inline Related Posts
  • Email Encoder
  • LearnPress
  • WP ULike
  • AI Engine
  • aThemes Starter Sites
  • Bold Page Builder
  • WP Booking Calendar
  • User Profile Builder
  • Better Find and Replace
  • Rbs Image Gallery
  • Piotnet Addons For Elementor
  • WP Meteor Website Speed Optimization Addon
  • All-in-One Video Gallery
  • Funnel Builder for WordPress by FunnelKit
  • Funnels, Order Bumps & One Click Upsells
  • Icegram Engage
  • Popup Maker
  • ConveyThis
  • MasterStudy LMS WordPress Plugin
  • HTML Forms
  • Youzify
  • Campaign Monitor for WordPress
  • WP EasyPay
  • Great Restaurant Menu WP
  • Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery
  • Image SEO – AI-Driven Image SEO Optimizer
  • MaxiBlocks
  • Custom Query Blocks
  • Request a Quote
  • Community Events
  • Ultimate Classified Listings
  • PZ Frontend Manager
  • PowerPack Pro for Elementor
  • Social Auto Poster
  • WooCommerce Product Table Lite
  • Affiliate Manager

Looking for peace of mind and less tech stress?​

Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.

Signup for one of our website care/management plans and get a tech-savvy team who are committed to your business.

Never worry about your website again.

Let Us Help You

How Do I Update WordPress?

Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.

Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.

Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.

After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.