Digital Chicks People Focused Tech Powered Logo

WordPress Vulnerability Report — March 27, 2024

In this report, 209 new vulnerabilities have been publicly disclosed. Security patches for 182 of these plugins and 8 themes are available as of the publishing of this report.

Vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates!

Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.

WordPress Core

Woot! No new core vulnerabilities were disclosed this week.

WordPress Themes

Themes With No Fix/Patch Available

The vulnerability(ies) have been patched. You should deactivate the theme(s).
  • Graphene

Themes With A Fix/Patch Available

The vulnerability(ies) have been patched. You should update to the latest version.
  • Astra
  • Avada
  • ColorMag
  • Newsmatic

WordPress Plugins

Plugins With No Fix/Patch Available

The vulnerability(ies) have not been patched. You should deactivate the plugin(s).

  • Create by Mediavine
  • Coming Soon & Maintenance Mode by Colorlib
  • Travelpayouts: All Travel Brands in One Place
  • Advanced Social Feeds Widget & Shortcode
  • Animated Headline
  • Easy Maintenance Mode
  • Enjoy Social Feed plugin for WordPress website
  • Innovs HR
  • Network Summary
  • Scalable Vector Graphics (SVG)
  • Social Media Share Buttons
  • Standout Color Boxes and Buttons
  • UX Flat
  • Website Article Monetization By MageNet
  • Management App for WooCommerce
  • Live Sales Notification for Woocommerce – Woomotiv
  • Youzify Buddypress Moderation

Plugins With A Fix/Patch Available

The vulnerability(ies) have been patched. You should update to the latest version.

  • Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders
  • Rank Math SEO with AI SEO Tools
  • File Manager
  • Popup Maker – Popup for opt-ins, lead gen, & more
  • Page Builder by SiteOrigin
  • Forminator – Contact Form, Payment Form & Custom Form Builder
  • Page Builder Gutenberg Blocks – CoBlocks
  • Gutenberg Blocks by Kadence Blocks – Page Builder Features
  • WP Go Maps (formerly WP Google Maps)
  • Breeze – WordPress Cache Plugin
  • PDF Embedder
  • Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin
  • SEOPress – On-site SEO
  • Blocksy Companion
  • WooCommerce Checkout & Funnel Builder by CartFlows – Create High Converting Stores For WooCommerce
  • Jeg Elementor Kit
  • Page Builder: Pagelayer – Drag and Drop website builder
  • Popup Builder – Create highly converting, mobile friendly marketing popups
  • Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
  • Flipbook, 3D Flipbook, PDF embed, PDF viewer – DearFlip
  • Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows)
  • Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider)
  • Check & Log Email
  • GiveWP – Donation Plugin and Fundraising Platform
  • HT Mega – Absolute Addons For Elementor
  • Qi Addons For Elementor
  • SEO Plugin by Squirrly SEO
  • Tracking Code Manager
  • VK All in One Expansion Unit
  • EmbedPress – Embed PDF, Google Docs, Vimeo, Wistia, Embed YouTube Videos, Audios, Maps & Embed Any Documents in Gutenberg & Elementor
  • Widget for Social Page Feeds
  • Permalink Manager Pro
  • Real Media Library: Media Library Folder & File Manager
  • Media Library Assistant
  • Exclusive Addons for Elementor
  • Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder
  • Getwid – Gutenberg Blocks
  • Translate WordPress and go Multilingual – Weglot
  • Bold Page Builder
  • Calculated Fields Form
  • Easy Social Feed – Social Photos Gallery – Post Feed – Like Box
  • Image Hover Effects – Elementor Addon
  • WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels
  • Smart Custom Fields
  • Booster for WooCommerce
  • WPFront Notification Bar
  • Photo Gallery by Supsystic
  • Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor
  • Piotnet Addons For Elementor
  • Simply Static
  • Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates)
  • BetterDocs – Best Documentation, FAQ & Knowledge Base Plugin with AI Support & Instant Answer for Elementor & Gutenberg
  • Compact WP Audio Player
  • OneClick Chat to Order
  • Portfolio Gallery – Image Gallery Plugin
  • Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin
  • Stratum – Elementor Widgets
  • Team Members
  • Tutor LMS Elementor Addons
  • WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible
  • Responsive Pricing Table
  • Conversios – Google Analytics 4 (GA4), Meta Pixel & more Via Google Tag
  • Manager For WooCommerce
  • MailChimp Forms by MailMunch
  • Restrict User Access – Ultimate Membership & Content Protection
  • Video Conferencing with Zoom
  • WPBakery Page Builder Addons by Livemesh
  • Advanced Form Integration – Connect WooCommerce and Contact Form 7 to Google Sheets and other platforms
  • Coming Soon, Under Construction & Maintenance Mode By Dazzler
  • FlatPM – Ad Manager, AdSense and Custom Code
  • GamiPress – The #1 gamification plugin to reward points, achievements, badges & ranks in WordPress
  • JetWidgets For Elementor
  • Jobs for WordPress
  • Lightweight Accordion
  • Modal Window – create popup modal window
  • Author Box, Guest Author and Co-Authors for Your Posts – Molongui
  • ReviewX – Multi-criteria Rating & Reviews for WooCommerce
  • s2Member – Best Membership Plugin for All Kinds of Memberships, Content
  • Restriction Paywalls & Member Access Subscriptions
  • WP Coder – Powerful HTML, CSS, JS and PHP Injection
  • Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit
  • PowerPack Lite for Beaver Builder
  • RevivePress – Keep your Old Content Evergreen
  • Gum Elementor Addon
  • Media Cloud for Bunny CDN, Amazon S3, Cloudflare R2, Google Cloud Storage, DigitalOcean and more
  • Better Search – Relevant search results for WordPress
  • WooCommerce POS – Point of Sale (POS)
  • WP Compress – Image Optimizer [All-In-One]
  • Easy Property Listings
  • Podlove Podcast Publisher
  • Woo Viet – WooCommerce for Vietnam
  • WP Change Email Sender
  • Doneren met Mollie
  • Error Log Viewer by BestWebSoft
  • Podlove Web Player
  • Radio Player – Live Shoutcast, Icecast and Any Audio Stream Player for WordPress
  • Survey Maker – Best WordPress Survey Plugin
  • Fancy Comments WordPress
  • Slider Hero with Animation, Video Background
  • Premium Packages – Sell Digital Products Securely
  • Custom WooCommerce Checkout Fields Editor
  • Advanced Classifieds & Directory Pro
  • EventPrime – Events Calendar, Bookings and Tickets
  • Hot Random Image
  • Move Addons for Elementor
  • Order Tip for WooCommerce
  • PropertyHive
  • Simple Ajax Chat – Add a Fast, Secure Chat Box
  • WP Directory Kit
  • affiliate-toolkit – WordPress Affiliate Plugin
  • Appointment Booking Calendar
  • Cards for Beaver Builder
  • Crypto Converter ? Widget
  • WP Poll Maker – Best WordPress Poll Plugin for Voting Contest
  • Grid Shortcodes
  • WordPress Pinterest Plugin – Make a Popup, User Profile, Masonry and Gallery Layout
  • MyBookTable Bookstore by Stormhill Media
  • Aparat for WordPress
  • 360 Javascript Viewer
  • Advanced Sermons
  • Bulk NoIndex & NoFollow Toolkit
  • Church Admin
  • Co-marquage service-public.fr
  • Dracula Dark Mode – Enhanced Accessibility, Dark Mode & Reading Mode for WordPress
  • Dropdown multisite selector
  • Exchange Rates Widget
  • Football Pool
  • Fullscreen Galleria
  • WP Fast Total Search – The Power of Indexed Search
  • Photo Gallery by Ays – Responsive Image Gallery
  • GamiPress – Button
  • Gratisfaction- Loyalty, Rewards , Referral, Birthday and Giveaway Program
  • iCalendrier
  • Web Icons
  • Locatoraid Store Locator
  • MyCurator Content Curation
  • Off-Canvas Sidebars & Menus (Slidebars)
  • Passwordless Login
  • PDF Builder for WPForms
  • Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget
  • BizPrint – Print WooCommerce Order Receipts, Invoices, Labels & More
  • ReDi Restaurant Reservation
  • SEO Backlink Monitor
  • StreamWeasels Twitch Integration
  • Sunshine Photo Cart: Free Client Galleries for Photographers
  • Travelers’ Map
  • WC Builder – WooCommerce Page Builder for WPBakery
  • Shipping with Venipak for WooCommerce
  • BuddyPress WooCommerce My Account Integration. Create WooCommerce Wember Pages
  • WishSuite – Wishlist for WooCommerce
  • WooCommerce Clover Payment Gateway
  • WooCommerce Cloak Affiliate Links
  • WP-Lister Lite for Amazon
  • MDTF – Meta Data and Taxonomies Filter
  • LiquidPoll – Polls, Surveys, NPS and Feedback Reviews
  • WP Post Disclaimer
  • Backup Bolt
  • Frontend Dashboard
  • System Dashboard
  • CM Download Manager – Document and File Management
  • Contests by Rewards Fuel
  • MJM Clinic
  • BuddyForms
  • Easy Social Share Buttons
  • Fancy Product Designer
  • Invitation Code Content Restriction Plugin from CreativeMinds
  • Memberpress
  • New RoyalSlider
  • Olive One Click Demo Import
  • Permalink Manager Pro
  • Schema Pro
  • WordPress Importer

Looking for peace of mind and less tech stress?​

Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.

Signup for website management and get a tech-savvy team who are committed to your business.

Never worry about your website again.

Let Us Help You

How Do I Update WordPress?

Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.

Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.

Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.

After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.