Digital Chicks People Focused Tech Powered Logo

WordPress Vulnerability Report —June 4, 2025

Since our last report, 97 vulnerabilities have been publicly disclosed. 38 of the vulnerable plugins and themes remain unpatched.

Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.

Along with poor user account security, vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates.

If this seems overwhelming, talk to us about a Website Care Plan.

WordPress Core

No vulnerabilities disclosed!

WordPress 6.8.1 has been released! This maintenance release includes fixes for 15 bugs throughout Core and the Block Editor, addressing issues affecting multiple areas of WordPress, including the block editor, multisite, and REST API. For a full list, refer to the release candidate announcement.

WordPress Themes

Themes With No Fix/Patch Available

  • Arlo
  • FLAP
  • FlatNews
  • Krowd
  • PIMP
  • PressGrid
  • Revo
  • Soho Hotel
  • Spare

Themes With A Fix/Patch Available

Disclosed vulnerability(ies) have been patched. You should update to the latest version.

  • Courtney
  • Lesya
  • Lettery
  • Minterio
  • Mr. Murphy
  • Starbelly
  • Sweet Dessert

Looking for peace of mind and less tech stress?​

Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.

Signup for one of our website care/management plans and get a tech-savvy team who are committed to your business.

Never worry about your website again.

Let Us Help You

WordPress Plugins

Plugins With No Fix/Patch Available

Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).

  • Uncanny Automator
  • Real Time Validation for Gravity Forms
  • MaxiBlocks
  • Featured Image Plus
  • Spreadsheet Price Changer for WooCommerce and WP E-commerce
  • History Log
  • Product Subtitle for WooCommerce
  • Infility Global
  • SUMO Affiliates Pro
  • Apptha Slider Gallery
  • Blog Designer PRO for WordPress
  • Browse As
  • WPCHURCH
  • CSV Mass Importer
  • Daisycon
  • FastSpring
  • Flynax Bridge
  • Gearside Developer Dashboard
  • Likes and Dislikes
  • Offsprout Page Builder
  • QuickCab
  • WBW Product Table PRO
  • Woo Slider Pro
  • WooCommerce Orders & Customers Exporter
  • WP-GeoMeta
  • WP Guppy

Plugins With A Fix/Patch Available

The vulnerability(ies) have been patched. You should update to the latest version.

  • Easy Social Feeds Plugin
  • WP-Optimize
  • Broken Link Checker
  • Ocean Extra
  • Royal Elementor Addons and Templates
  • Element Pack Addons for Elementor
  • Essential Blocks
  • Real Cookie Banner
  • The Plus Addons for Elementor
  • Ninja Tables
  • Exclusive Addons for Elementor
  • Bold Page Builder
  • Easy Digital Downloads
  • Form Maker by 10Web
  • PowerPress Podcasting plugin by Blubrry
  • LA-Studio Element Kit for Elementor
  • Responsive Plus
  • WidgetKit
  • Ultimate Gift Cards for WooCommerce
  • Borderless
  • Simple Page Access Restriction
  • EU/UK VAT Validation Manager for WooCommerce
  • MStore API
  • Min Max Step Quantity Limits Manager for WooCommerce
  • Shared Files
  • WP Attachments
  • WP Posts Carousel
  • WordPress Comments Import & Export
  • Newsletters
  • Integration for Salesforce and Contact Form 7, WPForms, Elementor, Formidable, Ninja Forms
  • Quick Contact Form
  • Dynamic Pricing and Discount Rules
  • Number of Products per Page – Pagination Manager for WooCommerce
  • Vayu Blocks
  • The Ultimate WordPress Toolkit – WP Extended
  • WordPress Contact Forms by Cimatti
  • Map Block Leaflet
  • WP Plugin Info Card
  • Verge3D Publishing and E-Commerce
  • Wishlist
  • WP Pipes
  • NinjaTeam Chat for Telegram
  • Tournamatch
  • eaSYNC Booking
  • Minimal Share Buttons
  • OpenSheetMusicDisplay
  • Property – Real Estate Directory Listing
  • MasterStudy LMS Pro
  • Real Cookie Banner Pro
  • wpForo Advanced Attachments

How Do I Update WordPress?

Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.

Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.

Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.

After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.

Tagged