WordPress Vulnerability Report — November 20, 2024
Since last week, 205 vulnerabilities have been publicly disclosed. Security patches for 86 of these plugins and themes are available now.
Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.
Along with poor user account security, vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates.
If this seems overwhelming, talk to us about a Website Care Plan.
WordPress Core
WordPress Themes
Themes With No Fix/Patch Available
- Airin Blog
- Gameplan
- ReConstruction
- Xin
Themes With A Fix/Patch Available
- Ashe
- Bard
WordPress Plugins
Plugins With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).
- Disable Admin Notices individually
- Master Addons
- Classified Listing
- Copy Anything to Clipboard
- Popup by Supsystic
- Weather Atlas Widget
- Team Member
- Themify Builder
- BuddyPress Builder for Elementor
- Extensions for Elementor
- Library Bookshelves
- Team Rosters
- Buying Buddy IDX CRM
- Post By Email
- AI Responsive Gallery Album
- amr shortcodes
- WP Popup Window Maker
- LeadBoxer
- LGPD Framework By Data443
- NIX Anti-Spam Light
- TM Islamic Helper
- Linear
- Open edX LMS and WordPress integrator (LITE)
- Instant Image Generator
- Geolocator
- Infinite Slider
- WooCommerce Price Alert
- QRMenu Restaurant QR Menu Lite
- WP e-Commerce Style Email
- de:branding
- My Geo Posts Free
- Awesome Studio
- HTML5 Lyrics Karaoke Player
- nBlocks – Responsive Gutenberg News Blocks
- Post Ideas
- Ultimate Classified Listings
- AtaraPay WooCommerce Payment Gateway
- Chameleoni Jobs
- Explara Events
- GoQMieruca
- GoQSmile
- Xpresslane Fast Checkout
- 404 Error Monitor
- Sage AI
- AJAX Login and Registration modal popup + inline form
- AJAX Random Posts
- EleForms
- Aqua SVG Sprite
- B-Banner Slider
- Banner System
- BasePress Migration Tools
- Blogger 301 Redirect
- Boat Rental Plugin for WordPress
- Bounce Handler MailPoet 3
- BulkPress
- Buy one click WooCommerce
- SVG Case Study
- CF7 Reply Manager
- Constant Contact Forms
- Contact Page With Google Map
- Convert Docx2post
- CSV to HTML
- Datasets Manager by Arttia Creative
- Debug Tool
- Devexhub Gallery
- DigiPass
- Do That Task
- Drop Shadow Boxes
- Drozd – Addons for Elementor
- Dynamic URL SEO
- Easy CSV Importer BETA
- Elfsight Telegram Chat CC
- Exclusive Content Password Protect
- Exclusive Divi
- External Database Based Actions
- Fancy Gallery
- Fat Rat Collect
- Ads Booster by Ads Pro
- Gallerio
- Global Gateway e4 | Payeezy Gateway |
- Hacklog DownloadManager
- Hide Links
- KBucket
- Lis Video Gallery
- Matix Popup Builder
- Advanced Personalization
- Picsmize
- PJW Mime Config
- Push Notifications for WordPress by PushAssist
- Quick Learn
- Razorpay Payment Button
- Referrer Detector
- Relais 2FA
- SimpleForm
- SimpleForm Contact Form Submissions
- SK WP Settings BackupSocial Prof (Testimonial) Slider
- Steel
- Styler for Ninja Forms
- SVGPlus
- Uix Slideshow
- User Management
- UserPlus
- WDES Responsive Mobile Menu
- WP Githuber MD
- WP Log Viewer
- wp-login customizer
- WP Quick Setup
- WP-Strava
- WordPress Video Robot
- Premium Packages
- Writer Helper
- Youneeq Recommendations
- ZIJ KART
Plugins With A Fix/Patch Available
The vulnerability(ies) have been patched. You should update to the latest version.
- WPForms
- Really Simple Security
- Essential Addons for Elementor
- Google for WooCommerce
- Migration, Backup, Staging
- Happy Addons for Elementor
- Post SMTP
- Hide My WP Ghost – Security & Firewall
- WP Activity Log
- Admin and Site Enhancements (ASE)
- Simple Local Avatars
- Advanced Order Export For WooCommerce
- WP Chat App
- Customer Reviews for WooCommerce
- Popup Box
- Post Grid Gutenberg Blocks and WordPress Blog Plugin
- Futurio Extra
- MP3 Audio Player
- Recover WooCommerce Cart Abandonment
- Backup and Staging
- 404 Solution
- AFI – The Easiest Integration Plugin
- Classified Listing
- GamiPress
- JetWidgets For Elementor
- Jobs for WordPress
- Music Player for Elementor
- Popularis Extra
- LearnPress Export Import
- WP Project Manager
- Contact Form 7 Redirect & Thank You Page
- Real3D Flipbook Lite
- WPB Popup for Contact Form 7
- Boostify Header Footer Builder for Elementor
- Hash Elements
- Simple File List
- WP Job Portal
- WOLF
- Podlove Podcast Publisher
- Multiple Page Generaor Plugin – MPG
- Parallax Image
- RSS Feed Widget
- Yotpo: Product & Photo Reviews for WooCommerce
- Chartify
- Email Subscription Popup
- Mapster WP Maps
- Slickstream: Engagement and Conversions
- SVG Block
- Kognetiks ChatbotEven
- t Tickets with Ticket Scanner
- GD Rating System
- Login using WordPress Users
- MultiManager WP
- Product Delivery Date for WooCommerce – Lite
- Razorpay Payment Button Elementor Plugin
- W3SPEEDSTER
- xili-tidy-tags
- GPX Viewer
- Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One
- CYAN Backup
- CM Table Of Contents
- CDI – Collect and Deliver Interface for Woocommerce
- Opal Woo Custom Product Variation
- Hive Support
- Print PDF Generator and Publisher
- WordPress Bootscraper
- Hebrew Dates
- Floating Buttons for WooCommerce
- kineticPay for WooCommerce
- Luna Web Radio Player
- Pie Register Premium
- Really Simple Security Pro
- Really Simple Security Pro multisite
- WooCommerce Upload Files
- WordPress GDPR & CCPA
- User Extra Fields
Looking for peace of mind and less tech stress?
Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.
Signup for one of our website care/management plans and get a tech-savvy team who are committed to your business.
Never worry about your website again.
Let Us Help YouHow Do I Update WordPress?
Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.
Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.
Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.
After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.