Digital Chicks People Focused Tech Powered Logo

WordPress Vulnerability Report — March 5, 2025

Since our last report, 143 vulnerabilities have been publicly disclosed. 57 of the vulnerable plugins and themes remain unpatched.

Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.

Along with poor user account security, vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates.

If this seems overwhelming, talk to us about a Website Care Plan.

WordPress Core

No vulnerabilities disclosed!

WordPress Themes

Themes With No Fix/Patch Available

Disclosed vulnerability(ies) have not yet been patched. You should deactivate the themes(s).

  • Sparkling
  • Homey
  • Lafka
  • Listingo
  • VEDA
  • Zass

Themes With A Fix/Patch Available

Disclosed vulnerability(ies) have been patched. You should update to the latest version.

  • Newscrunch
  • VW Storefront
  • Flex Mag
  • Golo
  • Homey
  • JNews

Looking for peace of mind and less tech stress?​

Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.

Signup for one of our website care/management plans and get a tech-savvy team who are committed to your business.

Never worry about your website again.

Let Us Help You

WordPress Plugins

Plugins With No Fix/Patch Available

Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).

  • SEO Plugin
  • Master Slider
  • Content Control
  • All-in-One Addons for Elementor
  • Wishlist for WooCommerce
  • SearchIQ
  • Point Maker
  • Recently Purchased Products For Woo
  • Allow PHP Execute
  • Code Snippets CPT
  • Contact Us By Lord Linus
  • CS Framework
  • DesignThemes Core Features
  • Download HTML TinyMCE Button
  • URL Shortener | Conversion Tracking | AB Testing | WooCommerce
  • WooMail
  • Email Keep
  • Ultimate Video Player
  • I Am Gloria
  • Hero Maps Premium
  • Hero Mega Menu
  • Hero Slider
  • InWave Jobs
  • Limit Bio
  • Link My Posts
  • mEintopf
  • miniOrange Social Login and Register Pro Addon
  • My Quota
  • Ninja Pages
  • WP Online Contract
  • Passbeemedia Web Push Notification
  • Post Lockdown
  • Post Meta Data Manager
  • WooCommerce Recover Abandoned Cart
  • Razorpay Subscription Button Elementor Plugin
  • School Management
  • Shortcode Cleaner Lite
  • Simple Notification
  • SpotBot
  • WoWPth
  • WordPress Awesome Import & Export
  • WP Click Info
  • WP e-Customers Beta
  • WP-PManager
  • WP Real Estate Manager
  • Years Since

Plugins With A Fix/Patch Available

The vulnerability(ies) have been patched. You should update to the latest version.

  • PixelYourSite
  • WP Shortcodes Plugin
  • Post SMTP
  • Page Builder: Pagelayer
  • Ultimate Member
  • WP Activity Log
  • Admin and Site Enhancements (ASE)
  • bbPress
  • Cookie banner plugin for WordPress
  • Download Manager
  • Essential Blocks
  • Advanced File Manager
  • FooGallery
  • GiveWP – Donation Plugin and Fundraising Platform
  • SEO Plugin by Squirrly SEO
  • The Plus Addons for Elementor
  • VK Blocks
  • HUSKY
  • HT Mega
  • Appointment Booking Calendar
  • Master Addons
  • Print Invoice & Delivery Notes for WooCommerce
  • Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors
  • RomethemeKit For Elementor
  • 140+ Widgets | Xpro Addons For Elementor
  • Gallery by BestWebSoft
  • Qubely
  • SupportCandy
  • UiPress lite
  • WPGet API
  • Notibar
  • EventPrime
  • Podlove Podcast Publisher
  • Product Input Fields for WooCommerce
  • Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins
  • VikRentCar Car Rental Management System
  • WP Posts Carousel
  • Moving Media Library
  • Wallet System for WooCommerce
  • SMTP by BestWebSoft
  • Eventer
  • teachPress
  • WP-Recall
  • WPCOM Member
  • Spreadsheet Integration
  • WPCS
  • Flexmls® IDX Plugin
  • Greek Multi Tool
  • Simple Download Counter
  • Solace Extra
  • Ultimate WordPress Auction Plugin
  • m1.DownloadList
  • WordPress abandoned cart recovery and email marketing for WooCommerce
  • Gallery Styles
  • Reservit Hotel
  • Multiple Shipping And Billing Address For Woocommerce
  • WPBookit
  • Appsero Helper
  • Platform.ly for WooCommerce
  • Aiomatic
  • Animation Addons for Elementor Pro
  • CS Framework
  • Edd Google Sheet Connector Pro
  • Easy Digital Downloads Google Sheet Connector
  • Gtbabel
  • Javo Core
  • School Management
  • Social Share And Social Locker
  • WooCommerce Multi Currency – Currency Switcher

How Do I Update WordPress?

Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.

Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.

Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.

After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.

Tagged