WordPress Vulnerability Report — November 13, 2024
Since last week, 323 vulnerabilities have been publicly disclosed. Security patches for 95 of these plugins and themes are available now.
Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.
Along with poor user account security, vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates.
If this seems overwhelming, talk to us about a Website Care Plan.
WordPress Core
No vulnerabilities disclosed!
WordPress Themes
Themes With No Fix/Patch Available
- Storely
- Anih
Themes With A Fix/Patch Available
- Th Shop Mania
- Top Store
- WPLMS
WordPress Plugins
Plugins With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).
- Master Addons
- Classified Listing
- Team Member
- Post From Frontend
- AA Audio Player
- Bing Search API Integration
- AchillesTheme-shortcodes
- Add Ribbon Shortcode
- Advanced Video Player with Analytics
- Adventure Bucket List
- AgendaPress
- Sage AI
- Instant Image Generator
- Ajax Content Filter
- Alert Me!
- EleForms
- Assist24 Help Desk
- Audio Record
- audioCase
- Awesome Fitness Testimonials
- Awesome Tool Tip
- AzonBox
- Bamboo Enquiries
- Banner System
- Be Shortcodes
- Beacon For Help Scout
- BeBetter Social Icons
- best bootstrap widgets for elementor
- Bg Patriarchia BU
- Bitcoin Payments
- Blocks Post Grid
- Boat Rental Plugin for WordPress
- Boombox Shortcode
- Brand my Footer
- Bread & Butter
- Browsing History
- BU Slideshow
- Buooy Sticky Header
- CE21 Suite
- CF7 WOW Styler
- Charity Addon for Elementor
- codeSnips
- Smooth Maps
- Combo WP Rewrite Slugs
- Community Yard Sale
- Computer Repair Shop
- WP Virtual Room Configurator
- Content Syndication Toolkit Reader
- Conversion Helper
- Cowidgets – Elementor Addons
- Custom Dashboard Widget
- Creative Blocks
- CRM 2go
- Custom URL Shortener
- Daily Image
- Dashing Memberships
- Datasets Manager by Arttia Creative
- Debug Tool
- Devexhub Gallery
- DigiPass
- Do That Task
- Don’t Break The Code
- Doofinder
- drop in image slideshow gallery
- DuoGeek Blocks
- Easy CSV Importer BETA
- Easy Social Sharebar
- eewee admin custom
- Ekiline Block Collection
- Embed documents shortcode
- ESB Testimonials
- Fabrica Synced Pattern Instances
- Faltu Testimonial Rotator
- Fancy User List
- Fast Video and Image Display
- Featured product by category name
- File Select Control For Elementor
- Firework Shoppable Live Video
- Forms: 3rd-Party Post Again
- FriendStore for WooCommerce
- Horsemanager
- Gboy Custom Google Map
- Geoportail Shortcode
- Geotagged Media
- Global Gateway e4 | Payeezy Gateway |
- Google Visualization Charts
- GreenCon
- WoW Guild Armory Roster
- Gutenium Blocks
- Satisfaction Reports from Help Scout
- HB AUDIO GALLERY
- Hola Free Video Player
- HQ60 Fidelity Card
- I Plant A Tree
- IA Map Analytics Basic
- Icon Widget
- Image Carousel Shortcode
- Image Classify
- Inline Click To Tweet
- IntelliWidget Elements
- Jigoshop – Store Toolkit
- KBucket
- Keymaster Chord Notation Free
- Kings Tab Slider
- L Squared Hub WP
- Lenxel Core for Lenxel(LNX) LMS
- Location Click Map
- Loginplus
- Luzuk Slider
- Luzuk Team
- Luzuk Testimonials
- Mage Front End Forms
- Magic Slider
- Map Store Locator
- Mapme
- Master Bar
- MDC YouTube Downloader
- Matix Popup Builder
- mFolio Lite
- MG Post Contributors
- Minical Hotel Booking Plugin
- Mobile Kiosk
- Moka Get Posts Shortcode
- Moose Elementor Kit
- Multi-day Booking Calendar
- Multifox Plus
- Multiple Votes in one page
- My Restaurant Menu
- WP Responsive Video
- Narnoo Commerce Manager
- News Articles
- News Ticker
- The Novel Design Store Directory
- NV Slider
- Official SalesWizard CRM Plugin
- Olympus Shortcodes
- OpenCart Product Display
- OS BXSlider
- OS Our Team
- OS Pricing Tables
- Parallaxer
- ParOne Feeds
- Pay With Stripe
- Pdf Embedder Fay
- Persian Nested Show/Hide Text
- PF Timer
- Photographer Connections
- Picsmize
- Plenigo
- Popup Image
- Postcasa Shortcode
- Postify: Post Layout For Elementor
- Posts Filter
- Posts Search
- PropertyShift
- Provide Forex Signals
- Pull This
- ra_qrcode
- Relais 2FA
- Responsive Data Table
- Share Buttons – Social Media
- Rig Elements For Elementor
- RSV 360 View
- RSV PDF Preview
- Saragna
- scrollup
- Search order by product SKU for WooCommerce
- Sell Media File with Stripe
- Semantic Shortcode
- Lewe Bootstrap Visuals
- Shortcode Collection
- Redirecter
- Simple Pricing Table
- Simple Social Share Block
- SimpleGMaps
- Simple Modal
- Simplistic SEO
- Simpul Events by EsotechSocial button
- Social Locker
- Stylish Internal Links
- Surbma | Font Awesome
- SV Forms
- SVT Simple
- Table of Contents Plus
- Team Showcase and Slider – Team Members Builder
- TeleAdmin
- Testimonial Slider Shortcode
- Text Advertisements
- Tigris Flexplatform
- TinyCode
- Topbar ID for Elementor
- Trendy Restaurant Menu
- SrcSet Responsive Images for WordPress
- Twitter real time search scrolling
- Ultimate Accordion
- User Meta
- User Password Reset
- Utech Spinning Earth
- UW Freelancer
- VP Sitemap
- Wd-image-magnifier-xoss
- WE – Client Logo Carousel
- Websand Subscription Form
- Wezido
- WP Agenda
- wp_automatic_widget
- WP-Basics
- WP Contest
- EventPress
- Wp-ImageZoom
- imPress
- WP Listings Pro
- WP MMenu Lite
- WP PagSeguro Payments
- Wp Slide Categorywise
- WP Visual Adverts
- Website remote Install vor Gravity, WPForms, Formidable, Ninja, Caldera
- WPHelpful
- Admin Amplify
- yPHPlista
- Cookie Nonsense for YT
- ZIJ KART
Plugins With A Fix/Patch Available
The vulnerability(ies) have been patched. You should update to the latest version.
- Elementor Header & Footer Builder
- Loginizer
- Safe SVG
- Happy Addons for Elementor
- Photo Gallery by 10Web
- Admin and Site Enhancements
- Element Pack Elementor Addons
- Prime Slider – Addons For Elementor
- Contact Form 7
- Pods – Custom Content Types and Fields
- WP ULike
- WP Booking Calendar
- Form Maker by 10Web
- MapPress Maps for WordPress
- Easy SVG Support
- Envo Extra
- Seriously Simple Podcasting
- Super Socializer
- Futurio Extra
- Code Embed
- 140+ Widgets | Xpro Addons For Elementor
- Charitable – Donation Plugin for WordPress
- Contact Form 7 – PayPal & Stripe Add-on
- SysBasics Customize My Account for WooCommerce
- Pricing Tables WordPress Plugin – Easy Pricing Tables
- JetWidgets For Elementor
- myCred
- OSM – OpenStreetMap
- Registrations for the Events Calendar
- WP Photo Album Plus
- Algori PDF Viewer
- WS Form LITE
- Contact Form 7 Redirect & Thank You Page
- Poll Maker – Versus Polls, Anonymous Polls, Image Polls
- Ultimate Bootstrap Elements for Elementor
- XT Floating Cart for WooCommerce
- WP Job Portal – A Complete Recruitment System for Company or Job Board website
- WOLF – WordPress Posts Bulk Editor and Manager Professional
- ElementsReady Addons for Elementor
- Magical Addons For Elementor
- Podlove Podcast Publisher
- Simple Shortcode for Google Maps
- Everest Backup
- LIQUID BLOCKS
- Content Slider Block
- Multiple Page Generator Plugin
- Tickera – WordPress Event Ticketing
- Active Products Tables for WooCommerce
- Responsive Filterable Portfolio
- Slickstream: Engagement and Conversions
- The Pack Elementor addons
- Zotpress
- Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery
- Countdown Timer block
- Event post
- Heateor Social Login WordPress
- WooCommerce Report
- Landing Page Cat – Coming Soon Page, Maintenance Page & Squeeze Pages
- Responsive Addons for Elementor
- Web Stories Widgets For Elementor
- SKT Addons for Elementor
- Tumult Hype Animations
- Video Gallery for WooCommerce
- W3SPEEDSTER
- xili-tidy-tags
- Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One
- CYAN Backup
- Shortcodes Blocks Creator Ultimate
- Basticom Framework
- Forms
- Pro Addons For Elementor
- Print PDF Generator and Publisher
- Anant Addons for Elementor
- Realty by BestWebSoft
- Christian Science Bible Lesson Subjects
- Hebrew Dates
- Floating Buttons for WooCommerce
- Ultimate Flipbox Addon for Elementor
- Dynamic Post Grid Elementor Addon
- Hive Support – WordPress Help Desk
- kineticPay for WooCommerce
- Loginizer Security
- Pie Register Premium
- Quform
- WooCommerce Social Login
- WooCommerce Support Ticket System
- JobSearch
- WP Membership
- User Extra Fields
Looking for peace of mind and less tech stress?
Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.
Signup for one of our website care/management plans and get a tech-savvy team who are committed to your business.
Never worry about your website again.
Let Us Help YouHow Do I Update WordPress?
Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.
Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.
Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.
After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.