WordPress Vulnerability Report — March 13, 2024

In this report, 70new vulnerabilities have been publicly disclosed. Security patches for 55 of these plugins and 2 themes are available as of the publishing of this report.

Vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates!

Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.

WordPress Core

Woot! No new core vulnerabilities were disclosed this week.

WordPress Themes

Themes With A Fix/Patch Available

The vulnerability(ies) have been patched. You should update to the latest version.
  • Blocksy
  • Blossom Spa

Themes With No Fix/Patch Available

None – Yea!

WordPress Plugins

Plugins With No Fix/Patch Available

The vulnerability(ies) have not been patched. You should deactivate the plugin(s).

  • Conversios – Google Analytics 4 (GA4)
  • Meta Pixel & more Via Google Tag Manager For WooCommerce
  • HT Easy GA4 – Google Analytics WordPress Plugin
  • Advanced Social Feeds Widget & Shortcode
  • ArtiBot
  • Enjoy Social Feed plugin for WordPress website
  • f(x) Private Site
  • Innovs HR
  • LadiApp
  • Malware Scanner
  • Newsletter2Go
  • Play.ht
  • Scalable Vector Graphics (SVG)
  • Web Application Firewall – website security

Plugins With A Fix/Patch Available

The vulnerability(ies) have been patched. You should update to the latest version.

  • Contact Form 7
  • Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders
  • ElementsKit Elementor addons
  • Elementor Header & Footer Builder
  • Premium Addons for Elementor
  • WP Statistics
  • Happy Addons for Elementor
  • Gutenberg Blocks by Kadence Blocks – Page Builder Features
  • POST SMTP – The #1 WordPress SMTP Plugin with Advanced Email Logging and Delivery Failure Notifications
  • WP Go Maps (formerly WP Google Maps)
  • Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE
  • PDF Embedder
  • Backuply – Backup, Restore, Migrate and Clone
  • Anti-Malware Security and Brute-Force Firewall
  • Jeg Elementor Kit
  • Paid Membership Plugin, Ecommerce, User Registration Form, Login Form,  Profile & Restrict Content – ProfilePress
  • Elementor Addon Elements
  • Advanced Access Manager – Restricted Content, Users & Roles, Enhanced Security and More
  • Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider)
  • Beaver Builder – WordPress Page Builder
  • Burst Statistics – Privacy-Friendly Analytics for WordPress
  • Colibri Page Builder
  • Download Manager
  • Everest Forms – Build Contact Forms, Surveys, Polls, Quizzes, Newsletter & Application Forms, and Many More with Ease!
  • GiveWP – Donation Plugin and Fundraising Platform
  • WP Armour – Honeypot Anti Spam
  • HT Mega – Absolute Addons For Elementor
  • Qi Addons For Elementor
  • Tracking Code Manager
  • HUSKY – Products Filter Professional for WooCommerce
  • ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor)
  • Hustle – Email Marketing, Lead Generation, Optins, Popups
  • Widget for Social Page Feeds
  • Permalink Manager Pro
  • Tutor LMS – eLearning and online course solution
  • Elementor Addons by Livemesh
  • Site Reviews
  • Visual Composer Website Builder, Landing Page Builder, Custom Theme Builder, Maintenance Mode & Coming Soon Pages
  • Contact Form by BestWebSoft – Advanced Contact Us Form Builder for WordPress
  • Easy Accordion – Best Accordion FAQ Plugin for WordPress
  • Easy Social Feed – Social Photos Gallery – Post Feed – Like Box
  • Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks
  • Shariff Wrapper
  • Premmerce Permalink Manager for WooCommerce
  • Super Page Cache for Cloudflare
  • WP Recipe Maker
  • Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress
  • Starbox – the Author Box for Humans
  • Crisp – Live Chat and Chatbot
  • FV Flowplayer Video Player
  • Link Whisper Free
  • Seriously Simple Podcasting
  • Team Members
  • Visualizer: Tables and Charts Manager for WordPress
  • WP Popups – WordPress Popup builder
  • Accordion
  • Responsive Pricing Table
  • DSGVO All in one for WP
  • Related Posts for WordPress
  • Restrict User Access – Ultimate Membership & Content Protection
  • Simple Job Board
  • Video Conferencing with Zoom
  • weForms – Easy Drag & Drop Contact Form Builder For WordPress
  • TeraWallet – Best WooCommerce Wallet System With Cashback Rewards, Partial Payment, Wallet Refunds
  • 404 Solution
  • WPBakery Page Builder Addons by Livemesh
  • Contact Form 7 – PayPal & Stripe Add-on
  • Cryptocurrency Widgets – Price Ticker & Coins List
  • RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login
  • JetWidgets For Elementor
  • Jobs for WordPress
  • LA-Studio Element Kit for Elementor
  • Link Library
  • MasterStudy LMS WordPress Plugin – for Online Courses and Education
  • s2Member – Best Membership Plugin for All Kinds of Memberships, Content Restriction Paywalls & Member Access Subscriptions
  • SupportCandy – Helpdesk & Customer Support Ticket System
  • Ultimate Posts Widget
  • UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress
  • WP Coder – Powerful HTML, CSS, JS and PHP Injection
  • Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit
  • WooCommerce Google Feed Manager
  • YITH WooCommerce Product Add-Ons
  • Zippy
  • Elements Plus!
  • PowerPack Lite for Beaver Builder
  • Tablesome – Responsive Table, Email Log, Form Automation – Contact Form 7, Elementor, WPForms, Gravity Forms, Fluent, Forminator
  • ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup
  • Better Search – Relevant search results for WordPress
  • Database for Contact Form 7
  • Restaurant Menu and Food Ordering
  • Easiest Sales Funnel Builder For WordPress & WooCommerce by WPFunnels
  • Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection)
  • HT Easy GA4 – Google Analytics WordPress Plugin
  • Specific Content For Mobile – Customize the mobile version without redirections
  • Ultimate Gift Cards for WooCommerce – Create, Redeem & Manage Digital Gift Certificates with Personalized Templates
  • AntiSpam for Contact Form 7
  • Free Downloads WooCommerce
  • Error Log Viewer by BestWebSoft
  • Survey Maker – Best WordPress Survey Plugin
  • Contact Form Builder by Bit Form: Create Contact Form, Multi Step Form, Conversational Form
  • ElementInvader Addons for Elementor
  • News Announcement Scroll
  • Sell Tickets – Event Ticketing and Event Registration – Ticket Tailor for WordPress
  • Coupon Affiliates – WooCommerce Affiliate Plugin
  • Auto Affiliate Links
  • WP Calameo
  • WP Fusion Lite – Marketing Automation and CRM Integration for WordPress
    Email Subscription Popup
  • EventPrime – Events Calendar, Bookings and Tickets
  • Profile Box Shortcode And Widget
  • Multiple Page Generator Plugin – MPG
  • oik
  • Registration Forms – User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction
  • PropertyHive
  • Categorify – WordPress Media Library Category & File Manager
  • Smart Online Order for Clover
  • CWW Companion
  • WP Responsive Tabs horizontal vertical and accordion Tabs
  • Sitekit
  • The Moneytizer
  • Advanced Sermons
  • Bulgarisation for WooCommerce
  • Photos and Files Contest Gallery – Contact Form, Upload Form, Social Share and Voting Plugin for WordPress
  • Knight Lab Timeline
  • MyCurator Content Curation
  • Passwordless Login
  • Sky Addons for Elementor (Free Templates Library, Live Copy, Animations, Post Grid, Post Carousel, Particles, Sliders, Chart, Blogs)
  • WEN Responsive Columns
  • wp-mpdf
  • WP SendFox
  • Backup Bolt
  • WC Shop Sync – Integrate Square and WooCommerce for Seamless Shop Management
  • Team Circle Image Slider With Lightbox
  • MJM Clinic
  • Barcode Scanner with Inventory & Order Manager
  • Calendarista Basic Edition
  • Contact Forms by Cimatti
  • Digits
  • Evergreen Content Poster
  • Fancy Product Designer
  • Formidable Registration
  • WooCommerce License Manager
  • WooThumbs for WooCommerce by Iconic
  • Mollie Forms
  • OxyExtras
  • Scrollsequence
  • Tourfic
  • User profile
  • Builder for WooCommerce reviews shortcodes – ReviewShort
  • Automatic

Looking for peace of mind and less tech stress?​

Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.

Signup for website management and get a tech-savvy team who are committed to your business.

Never worry about your website again.

Let Us Help You

How Do I Update WordPress?

Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.

Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.

Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.

After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.