Digital Chicks People Focused Tech Powered Logo

WordPress Vulnerability Report —July 9, 2025

Since our last report, 149 vulnerabilities have been publicly disclosed. 84 of the vulnerable plugins and themes remain unpatched.

Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.

Along with poor user account security, vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates.

If this seems overwhelming, talk to us about a Website Care Plan.

WordPress Core

No vulnerabilities disclosed!

WordPress 6.8.1 has been released! This maintenance release includes fixes for 15 bugs throughout Core and the Block Editor, addressing issues affecting multiple areas of WordPress, including the block editor, multisite, and REST API. For a full list, refer to the release candidate announcement.

WordPress Themes

Themes With No Fix/Patch Available

  • Electrician
  • Easy Video Player WordPress & WooCommerce
  • Home Villas
  • Invico
  • Kossy
  • ListingEasy
  • LMS
  • LogisticsHub
  • Ofiz

Themes With A Fix/Patch Available

Disclosed vulnerability(ies) have been patched. You should update to the latest version.

  • Alone
  • Amwerk
  • Classiera
  • CouponXxL
  • Diza
  • Education Center
  • Elessi
  • Houzez
  • Networker
  • RealHomes
  • Vikinger
  • WoodMart

Looking for peace of mind and less tech stress?​

Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.

Signup for one of our website care/management plans and get a tech-savvy team who are committed to your business.

Never worry about your website again.

Let Us Help You

WordPress Plugins

Plugins With No Fix/Patch Available

Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).

  • Soumettre.fr
  • Contact Form 7 reCAPTCHA
  • AI Bud
  • Chatra Live Chat + ChatBot + Cart Saver
  • (Simply) Guest Author Name
  • MyRewards
  • Leyka
  • WC Pickup Store
  • Frontend File Manager Plugin
  • Video Gallery Block
  • WP fancybox
  • Bulk Featured Image
  • URL Shortener
  • Gallery Widget
  • OwnerRez
  • MobiLoud
  • Easy Elements Hider
  • Aviation Weather from NOAA
  • Contact Form 7 Editor Button
  • LMSACE Connect
  • bSecure
  • Dot html,php,xml etc pages
  • fluXtore Funnel Builder for WordPress
  • SMu Manual DoFollow
  • Media Folder
  • Pay with Contact Form 7
  • Printcart Web to Print Product Designer for WooCommerce
  • Tennis Court Bookings
  • Video List Manager
  • Infility Global
  • Paytiko for WooCommerce
  • Smart Docs
  • Ultimate Push Notifications
  • Torod
  • CoSchool LMS
  • Posts Slider Shortcode
  • Cool fade popup
  • Card flip image slideshow
  • Custom Login And Signup Widget
  • Pixelating image slideshow gallery
  • iFrame Images Gallery
  • CF7 7 Mailchimp Add-on
  • WooCommerce Product Multi-Action
  • Allmart
  • Ads Pro Plugin
  • Amazon Affiliates Addon for WPBakery
  • Booking X
  • Contact Us page
  • DocCheck Login
  • WooCommerce Shop Page Builder
  • EventON
  • FW Gallery
  • GoZen Forms
  • WP Human Resource Management
  • Amazon Products to WooCommerce
  • JKDEVKIT
  • LoginWP – Pro
  • Magic Buttons for Elementor
  • MF Plus WPML
  • Opal Estate Pro
  • PrivateContent – Mail Actions
  • ProcessingJS for WordPress
  • Profiler
  • RD Contacto
  • Multi-language Responsive Contact Form
  • Service Finder Booking
  • Super Store Finder
  • Email Address Security
  • PayMaster for WooCommerce
  • WordPress Auto Spinner
  • WP Firebase Push Notification
  • WPQuiz
  • yContributors

Plugins With A Fix/Patch Available

The vulnerability(ies) have been patched. You should update to the latest version.

  • Essential Addons for Elementor
  • Premium Addons for Elementor
  • Migration, Backup, Staging
  • CFDB7
  • Forminator Forms
  • WP Shortcodes Plugin
  • SureForms
  • Dear Flipbook
  • AI Engine
  • Element Pack Elementor Addons and Templates
  • Contact Form by Everest Forms
  • Ultra Addons for Contact Form 7
  • Beautiful Cookie Consent Banner
  • Download Plugin
  • WP Visitor Statistics (Real Time Traffic)
  • Gutenberg Blocks
  • Contact Form by Bit Form
  • LifterLMS
  • Paid Membership Subscriptions
  • PowerFolio
  • All-in-One Addons for Elementor
  • WP Compress
  • Melapress File Monitor
  • Booking calendar
  • VikRentCar Car Rental Management System
  • Groundhogg
  • Radio Station by netmix®
  • WP Travel Gutenberg Blocks
  • Booking Calendar Contact Form
  • NGG Smart Image Search
  • PW WooCommerce On Sale!
  • Easy restaurant menu manager
  • Trust Payments Gateway for WooCommerce
  • Click & Pledge Connect
  • Easy Stripe
  • Guest Support
  • Site Chat on Telegram
  • All In One Slider Responsive
  • Case Theme User
  • CMSMasters Content Composer
  • CouponXxL Custom Post Types
  • CSS3 Vertical Web Pricing Tables
  • CSS3 Compare Pricing Tables for WordPress
  • Drag and Drop Multiple File Upload (Pro) – WooCommerce
  • eventlist
  • Masteriyo LMS PRO
  • PeepSo Core: Groups
  • Testimonials Showcase
  • Uncode Core

How Do I Update WordPress?

Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.

Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.

Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.

After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.

Tagged