Digital Chicks People Focused Tech Powered Logo

WordPress Vulnerability Report — May 7, 2025

Since our last report, 88 vulnerabilities have been publicly disclosed. 42 of the vulnerable plugins remain unpatched.

Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.

Along with poor user account security, vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates.

If this seems overwhelming, talk to us about a Website Care Plan.

WordPress Core

No vulnerabilities disclosed!

WordPress 6.8.1 has been released! This maintenance release includes fixes for 15 bugs throughout Core and the Block Editor, addressing issues affecting multiple areas of WordPress, including the block editor, multisite, and REST API. For a full list, refer to the release candidate announcement.

WordPress Themes

Themes With No Fix/Patch Available

All disclosed vulnerability(ies) have been patched.

Themes With A Fix/Patch Available

Disclosed vulnerability(ies) have been patched. You should update to the latest version.

  • NewsBlogger
  • Homey
  • Kleo
  • Motors

Looking for peace of mind and less tech stress?​

Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.

Signup for one of our website care/management plans and get a tech-savvy team who are committed to your business.

Never worry about your website again.

Let Us Help You

WordPress Plugins

Plugins With No Fix/Patch Available

Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).

  • Team Members
  • Section Widget
  • Crossword Compiler Puzzles
  • Personizely
  • Total processing card payments for WooCommerce
  • Abundatrade
  • Advanced Reorder Image Text Slider
  • AHAthat
  • Alink Tap
  • Buddyboss Platform
  • Category Widget
  • Custom PC Builder Lite for WooCommerce
  • Database Toolset
  • EC Authorize.net
  • External image replace
  • Flynax Bridge
  • GmapsMania
  • IGIT Related Posts With Thumb Image After Posts
  • Job Listings
  • KiwiChat NextClient
  • kStats Reloaded
  • LayoutBoxx
  • Web3Press
  • Custom Login and Registration
  • Nautic Pages
  • occupancyplan
  • OTP-less one tap Sign in
  • Remote Images Grabber
  • Separator Shortcode and Widget
  • Reales WP STPT
  • Subpage List
  • Syndicate Out
  • Theme Blvd Sliders
  • Total Donations
  • VerticalResponse Newsletter Widget
  • Visual Builder
  • Widgets as Shortcodes
  • Meta Keywords & Description
  • Xavin’s Review Ratings
  • Yame

Plugins With A Fix/Patch Available

The vulnerability(ies) have been patched. You should update to the latest version.

  • WP Statistics
  • Newsletter
  • SureForms
  • Admin and Site Enhancements (ASE)
  • Popup and Slider Builder by Depicter
  • OttoKit: All-in-One Automation Platform
  • User Registration & Membership
  • WP Maps
  • Calculated Fields Form
  • Seraphinite Accelerator
  • WordPress Tag, Category, and Taxonomy Manager
  • FULL
  • SecuPress Free
  • Gutenverse
  • Page View Count
  • WordPress Simple Shopping Cart
  • MStore API
  • WP-Recall
  • Product Category Slider for WooCommerce
  • Ultimate Store Kit
  • AM LottiePlayer
  • SurveyJS
  • Projectopia
  • BP Messages Tool
  • Formality
  • Cision Block
  • List Children
  • Taxonomy Chain Menu
  • Ads Pro Plugin
  • BuddyPress Platform Pro
  • Envolve Plugin
  • Gravity Forms WebHooks
  • Order Delivery Date for WP e-Commerce
  • Advance Seat Reservation Management for WooCommerce
  • ilingual CMS
  • tagDiv Composer
  • tagDiv Opt-In Builder
  • Ultimate Auction Pro

How Do I Update WordPress?

Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.

Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.

Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.

After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.

Tagged