Digital Chicks People Focused Tech Powered Logo

WordPress Vulnerability Report —June 18, 2025

Since our last report, 138 vulnerabilities have been publicly disclosed. 63 of the vulnerable plugins and themes remain unpatched.

Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.

Along with poor user account security, vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates.

If this seems overwhelming, talk to us about a Website Care Plan.

WordPress Core

No vulnerabilities disclosed!

WordPress 6.8.1 has been released! This maintenance release includes fixes for 15 bugs throughout Core and the Block Editor, addressing issues affecting multiple areas of WordPress, including the block editor, multisite, and REST API. For a full list, refer to the release candidate announcement.

WordPress Themes

Themes With No Fix/Patch Available

  • BodyCenter
  • CraftXtore
  • Fitrush
  • GiftXtore
  • Petito
  • Zagg
  • DSK
  • Themify Edmin
  • Inset
  • Photography
  • SNS Anton
  • Avaz
  • Evon
  • Nitan
  • Simen
  • Spare
  • Valen

Themes With A Fix/Patch Available

Disclosed vulnerability(ies) have been patched. You should update to the latest version.

  • Aora
  • Besa
  • CozyStay
  • Diza
  • Fana
  • Flozen
  • GrandPrix
  • Grill and Chow
  • Hara
  • Lasa
  • Maia
  • MediClinic
  • Nika
  • RealHomes
  • Ruza
  • Sapa
  • TinySalt
  • Zota

Looking for peace of mind and less tech stress?​

Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.

Signup for one of our website care/management plans and get a tech-savvy team who are committed to your business.

Never worry about your website again.

Let Us Help You

WordPress Plugins

Plugins With No Fix/Patch Available

Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).

  • Woocommerce Partial Shipment
  • Track, Analyze & Optimize by WP Tao
  • IndieBlocks
  • One-Login
  • Aeroscroll Gallery
  • PostaPanduri
  • AI Image Lab
  • Auto Attachments
  • Axle Demo Importer
  • Bunny’s Print CSS
  • Color Palette
  • Contact Us page
  • Digital Marketing and Agency Templates Addons for Elementor
  • Easy Flashcards
  • DIOT SCADA with MQTT
  • Elite Video Player
  • FW Food Menu
  • FW Gallery
  • WPGYM
  • Image Resizer On The Fly
  • REST API | Custom API Generator For Cross Platform And Import Export In WP
  • IRM Newsroom
  • kk Youtube Video
  • CLEVER
  • MapSVG
  • Nasa Core
  • Ovatheme Events Manager
  • Reformer for Elementor
  • Restrict File Access
  • School Management
  • Smart Notification
  • Telegram for WP
  • Userpro
  • Widget Logic
  • WidgetKit Pro
  • WP Employee Attendance System
  • WP Sliding Login/Dashboard Panel
  • WP URL Shortener
  • WP2HTML
  • WPCRM – CRM for Contact form CF7 & WooCommerce
  • XiSearch bar
  • Yougler Blogger Profile Page
  • Zen Sticky Social
  • Zotpress

Plugins With A Fix/Patch Available

The vulnerability(ies) have been patched. You should update to the latest version.

  • Essential Addons for Elementor
  • Premium Addons for Elementor
  • The Events Calendar
  • Smash Balloon Social Post Feed
  • File Manager Pro
  • Social Sharing Plugin
  • Slim SEO – Fast & Automated WordPress SEO Plugin
  • Meks Flexible Shortcodes
  • FunnelKit Automations
  • WP Travel Engine
  • myCred
  • Simple Newsletter Plugin
  • Responsive Plus
  • Malcure Malware Scanner
  • WP VR
  • AutomatorWP
  • Arconix FAQ
  • If-So Dynamic Content Personalization
  • Event Booking & Management Plugin for WooCommerce
  • WP Dummy Content Generator
  • WP Job Portal
  • Xagio SEO – AI Powered SEO
  • ProfileGrid
  • Arconix Shortcodes
  • CubeWP
  • WPAdverts
  • CubeWP Forms
  • Responsive Blocks
  • WP Zoho
  • Majestic Support
  • WP-DownloadManager
  • WP Views Counter
  • YITH PayPal Express Checkout for WooCommerce
  • Advanced Sermons
  • Ebook Store
  • Kama Click Counter
  • Membership For WooCommerce
  • AFS Analytics
  • Broadstreet
  • Traffic Monitor
  • Ultimate Reviews
  • Advanced Settings 3
  • ACF Onyx Poll
  • Game Review Block
  • TicketBAI Facturas para WooCommerce
  • WP2LEADS
  • OAuth Single Sign On
  • NewsLetter
  • Abandoned Cart Pro for WooCommerce
  • Workreap
  • Automatic
  • eForm

How Do I Update WordPress?

Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.

Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.

Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.

After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.

Tagged