WordPress Vulnerability Report — March 5, 2025
Since our last report, 209 vulnerabilities have been publicly disclosed. 197 of the vulnerable plugins and themes remain unpatched.
Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.
Along with poor user account security, vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates.
If this seems overwhelming, talk to us about a Website Care Plan.
WordPress Core
WordPress Themes
Themes With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should deactivate the themes(s).
- Traveler
Themes With A Fix/Patch Available
Disclosed vulnerability(ies) have been patched. You should update to the latest version.
- Newscrunch
- Enfold
- Nokri
- VW Storefront
- Bricks Builder
Looking for peace of mind and less tech stress?
Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.
Signup for one of our website care/management plans and get a tech-savvy team who are committed to your business.
Never worry about your website again.
Let Us Help YouWordPress Plugins
Plugins With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).
- FooGallery
- SEO Plugin by Squirrly SEO
- Ibtana
- Fluent Support
- Age Verification for your checkout page
- Login Me Now
- Forex Calculators
- PiwigoPress
- List Related Attachments
- URL Media Uploader
- WHMCS Client Area
- Add Linked Images To Gallery
- ADFO
- Admin Menu Manager
- All-In-One Cufon
- Archive Page
- Ark Theme Core
- Auto Tag Links
- Blightly Explorer
- Booknetic
- Bravo Search & Replace
- Bulk Content Creator
- Clicface Trombi
- Contact Form 7 Star Rating
- Contact Form 7 Star Rating with font Awesome
- Currency Switcher for WooCommerce
- Download HTML TinyMCE Button
- URL Shortener | Conversion Tracking | AB Testing
- Erima Zarinpal Donate
- F12-Profiler
- Fresh Framework
- FS Poster
- Google Maps for WordPress
- Hover Image Button
- EZ InLinkz linkup
- Just Variables
- Limit Bio
- Link My Posts
- Phee’s LinkPreview
- Local Search SEO Contact Page
- Minimum Password Strength
- Modal Portfolio
- My Quota
- Namaste! LMS
- NewsTicker
- NHR Options Table Manager
- Ninja Pages
- Get Posts
- Ohio Extra
- Om Stripe
- Önceki Yaz
- OneStore Sites
- Order Attachments for WooCommerce
- Passbeemedia Web Push Notification
- Pathomation
- Photo Gallery
- Pricing Table
- PrivateContent
- Profile Widget Ninja
- Quiz Organizer
- RAYS Grid
- Reactive Mortgage Calculator
- SakolaWP
- Simple Google Sitemap
- Simple:Press
- Smart Maintenance & Countdown
- SpotBot
- Live Streaming Video Player – by SRS Player
- Sticky Header On Scroll
- Table of Contents Block
- BuddyHolis TableSearch
- Countdown Timer
- Ultra Addons Lite for Elementor
- VG PostCarousel
- Video.js HLS Player
- ViperBar
- Tabs for WooCommerce
- Bitcoin / AltCoin Payment Gateway for WooCommerce
- Direct Checkout Button for WooCommerce
- WooCommerce Recargo de Equivalencia
- WooCommerce Display Products by Tags
- WooCommerce Ultimate Gift Card
- Templates
- WOW Entrance Effects (WEE!)
- WoWPth
- WP About Author
- WP-Asambleas
- WP Click Info
- WP e-Customers Beta
- JPG, PNG Compression and Optimization
- WP-PostRatings Cheater
- WP-PManager
- WP Sitemap
- WP Social SEO Booster
- WP Video Posts
- Yawave
Plugins With A Fix/Patch Available
The vulnerability(ies) have been patched. You should update to the latest version.- Elementor Website Builder
- SVG Support
- Page Builder by SiteOrigin
- Forminator Forms
- Gutenberg Blocks with AI by Kadence WP
- PixelYourSite
- Shortcodes Ultimate
- NextGEN Gallery
- Chaty
- Jeg Elementor Kit
- Advanced Google reCAPTCHA
- GenerateBlocks
- WP Activity Log
- Essential Blocks
- Everest Forms
- GiveWP
- Site Mailer
- LearnPress
- Events Manager
- Total Upkeep
- Simple Image Sizes
- Exclusive Addons for Elementor
- User Registration & Membership
- Advanced AJAX Product Filters
- Form Maker by 10Web
- Sina Extension for Elementor
- Master Addons – Elementor Addons
- ComboBlocks
- Accept Donations with PayPal & Stripe
- Image Photo Gallery Final Tiles Grid
- PublishPress Authors
- Secure Copy Content Protection and Content Locking
- NextMove Lite
- Wp Social Login and Register Social Counter
- wpForo Forum
- Better Messages
- Classified Listing
- Directorist
- IP2Location Redirection
- Logo Slider
- WPO365 | MICROSOFT 365 GRAPH MAILER
- Animated Text Block
- WordPress Gallery
- SMS Alert Order Notifications – WooCommerce
- Authors List
- Card Elements for Elementor
- WP Posts Carousel
- KiviCare
- Wallet System for WooCommerce
- Counter Box
- teachPress
- Vote, Sell via PayPal or Stripe, Social Share Buttons
- Product Catalog Simple
- Quotes llama
- Simple Download Counter
- Subscriptions & Memberships for PayPal
- Ultimate WordPress Auction Plugin
- BuddyPress WooCommerce My Account Integration
- PlayerJS
- SurveyJS
- m1.DownloadList
- WordPress abandoned cart recovery and email marketing for WooCommerce by Recapture
- RateMyAgent Official
- Multiple Shipping And Billing Address For Woocommerce
- Database Backup and check Tables Automated With Scheduler 2024
- DefendWP Firewall
- MK Google Directions
- Auto Ad Inserter
- Activity Log WinterLock
- Academist Membership
- Alloggio Membership
- Animation Addons for Elementor Pro
- Buddyboss Platform
- DHVC Form
- Edd Google Sheet Connector Pro
- Exertio Framework
- Easy Digital Downloads Google Sheet Connector
- Pie Register Premium
- SetSail Membership
- Social Share And Social Locker
- SureMembers
- Templines Elementor Helper Core
- ThemeMakers PayPal Express Checkout
- ThemeMakers Stripe Checkout
- WHMpress
- WooCommerce Cart Count Shortcode
- WordPress File Upload
How Do I Update WordPress?
Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.
Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.
Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.
After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.