WordPress Vulnerability Report — November 27, 2024
Since last week, 277 vulnerabilities have been publicly disclosed. 121 of the vulnerable plugins and themes remain unpatched.
Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.
Along with poor user account security, vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates.
If this seems overwhelming, talk to us about a Website Care Plan.
WordPress Core
No vulnerabilities disclosed!
WordPress Themes
Themes With No Fix/Patch Available
- Grip
- AccessPress Staple
- Jobify – Job Board WordPress Theme
Themes With A Fix/Patch Available
- Ashe
- Bard
- ForumEngine
WordPress Plugins
Plugins With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).
- Dynamic “To Top” Plugin
- Meteor Slides
- Weather Atlas Widget
- Premium Packages – Sell Digital Products Securely
- Beds24 Online Booking
- Announcement & Notification Banner
- Yaad Sarig Payment Gateway For WC
- Extensions for Elementor
- Absolute Addons For Elementor
- Generic Elements
- Library Bookshelves
- SuevaFree Essential Kit
- Team Rosters
- Buying Buddy IDX CRM
- Post By Email
- Shopready – Elementor addons for WooCommerce Page Builder
- Subaccounts for WooCommerce
- AI Responsive Gallery Album
- amr shortcodes
- Distance Based Shipping Calculator
- Lazy load videos and sticky control
- LeadBoxer
- LGPD Framework By Data443
- SP Blog Designer
- Tailored Tools
- TM Islamic Helper
- Elementor Portfolio Builder
- AI Quiz | Quiz Maker
- Open edX LMS and WordPress integrator (LITE)
- Geolocator
- Infinite Slider
- WooCommerce Price Alert
- QRMenu Restaurant QR Menu Lite
- WP e-Commerce Style Email
- Office Locator
- Advanced Event Manager
- de:branding
- Fintelligence Calculator
- ITERAS
- Awesome Studio
- HTML5 Lyrics Karaoke Player
- nBlocks – Responsive Gutenberg News Blocks
- Post Ideas
- Ultimate Classified ListingsAtaraP
- ay WooCommerce Payment Gateway
- Chameleoni Jobs
- Explara Events
- GoQMieruca
- GoQSmile
- Pathomation
- Pricing table addon for elementor
- YaDisk Files
- Xpresslane Fast Checkout
- Ahmeti Wp Güzel Sözler
- Alphabetical List
- April’s Call Posts
- Banner System
- Contact Form 7 Email Add on
- Contact Page With Google Map
- Continue Shopping From Cart
- Control horas
- Custom Shortcode Sidebars
- Dynamic URL SEO
- Easy Twitter Feed
- 4 Improvements
- Favicon My Blog
- Fence URL
- Footer Flyout Widget
- Google Plus Share and +1 Button
- Grey Owl Lightbox
- Grid View Gallery
- WordPress Brute Force Protection
- Hotlink2Watermark
- IceStats
- Idealien Category Enhancements
- Image horizontal reel scroll slideshow
- ImbaChat
- iPhone Webclip Manager
- Kevin’s
- LeanPress
- LinkLaunder SEO
- Lock User Account
- Multi Feed Reader
- Social Login
- Community by PeepSo
- Product Designer
- Protect Your Content
- Pure CSS Circle Progress Bar
- Quick Learn
- Quotes llama
- RealtyCandy IDX Broker Extended
- RecipePress Reloade
- salavat counter
- Crypto and DeFi Widgets
- Shine PDF Embeder
- Simple Travel Map
- Slick Sitemap
- Silverlight Video Player
- Sticky Social Icons
- LSX Tour Operator
- Tribute Testimonials
- Ultimate YouTube Video & Shorts Player With Vimeo
- UltraAddons Elementor Lite
- UserPlus
- WPBakery Visual Composer WHMCS Elements
- Wc Recently viewed products
- wp auto top
- WP-ISPConfig 3
- WPDash Notes
- Youneeq Recommendations
- yPHPlista
- Zajax – Ajax Navigation
Plugins With A Fix/Patch Available
The vulnerability(ies) have been patched. You should update to the latest version.
- WPForms
- Rank Math SEO
- Google for WooCommerce
- MailPoet
- Photo Gallery, Sliders, Proofing and Themes
- Formidable Forms
- Gutenberg Blocks with AI by Kadence WP
- Royal Elementor Addons and Templates
- Activity Log
- FluentSMTP
- Spam protection, Anti-Spam, FireWall by CleanTalk
- Jeg Elementor Kit
- Ultimate Member
- SEO Plugin by Squirrly SEO
- The Plus Addons for Elementor
- HUSKY – Products Filter Professional for WooCommerce
- Hustle
- Parsi Date
- Tutor LMS
- Customer Reviews for WooCommerce
- Clone
- Increase Maximum Upload File Size | Increase Execution Time
- Getwid – Gutenberg Blocks
- FOX – Currency Switcher Professional for WooCommerce
- Booster for WooCommerce
- Ditty – Responsive News Tickers, Sliders, and Lists
- Simple Membership
- Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX
- Security & Malware scan by CleanTalk
- Gallery Blocks with Lightbox
- Stratum – Elementor Widgets
- Branda
- MailChimp Forms by MailMunch
- MP3 Audio Player
- Backup and Staging by WP Time Capsule
- 404 Solution
- Classified Listing
- CM Pop-Up Banners for WordPress
- RegistrationMagic
- GamiPress
- LA-Studio Element Kit for Elementor
- Restaurant Menu
- Paid Membership Subscriptions
- PublishPress Revisions
- Simple Side Tab
- WooCommerce Product Table Lite
- WP Travel Engine
- WP User Manager
- Category Ajax Filter
- CM Tooltip Glossary
- GD bbPress Attachments
- If-So Dynamic Content Personalization
- MailMunch
- WP Project Manager
- Easiest Funnel Builder For WordPress & WooCommerce
- ProfileGrid
- Product Table for WooCommerce by CodeAstrology
- WPB Popup for Contact Form 7 – Showing The Contact Form 7 Popup on Button Click
- Product Input Fields for WooCommerce
- WPAdverts
- GEO my WP
- Request a Quote for WooCommerce and Elementor
- Booking calendar, Appointment Booking System
- Button Block
- CM WordPress Search And Replace Plugin
- MStore API
- Sp*tify Play Button for WordPress
- Premium Packages
- Add Chat App Button
- Parallax Image
- Additional Order Filters for WooCommerce
- affiliate-toolkit – WP Affiliate Plugin with Amazon
- Email Subscription Popup
- Sky Addons for Elementor
- SVG Block
- Theme Builder For Elementor
- Checkout with Cash App on WooCommece
- What Would Seth Godin Do
- Anonymous Restricted Content
- AppPresser
- Attesa Extra
- BNE Gallery Extended
- Name: CM E-Mail Registration Blacklist
- CM Header & Footer Script Loader
- Co-marquage service-public.fr
- Enter Addons
- Friendly Functions for Welcart
- GD Rating System
- InPost Gallery
- JobBoardWP
- NiceJob
- Rescue Shortcodes
- Save as PDF Plugin by Pdfcrowd
- Image Optimizer, Resizer and CDN – Sirv
- Bard Extra
- Include Mastodon Feed
- System Dashboard
- Taskbuilder
- Payments Plugin and Checkout Plugin for WooCommerce
- StreamWeasels Online Status Bar
- Theater for WordPress
- Block Editor Bootstrap Blocks
- Media File Rename
- Memberlite Shortcodes
- Wawp OTP Verification, Order Notifications, and Country Code
- Selector for WooCommerce
- WP Mailster
- CM Table Of Contents
- Custom CSS, JS & PHP
- FireCask’s Twitter Follow Button
- Dino Game
- Easy Liveblogs
- Opal Woo Custom Product Variation
- Slotti Ajanvaraus
- WIP Incoming Lite
- WP-Orphanage Extended
- Chessgame Shizzle
- Run Contests, Raffles, and Giveaways with ContestsWP
- HIPAA Compliant Forms with Drag’n’Drop HIPAA Form Builder
- My Contador lesr
- Skt NURCaptcha
- Ortto
- AutoListicle: Automatically Update Numbered List Articles
- CM Business Directory Plugin
- Video Lessons Manager
- PDF Invoices & Packing Slips Generator for WooCommerce
- Page Parts
- Fediverse Embeds
- WordPress Bootscraper
- Support SVG
- Document & Data Automation
- MP3 Sticky Player
- WPGYM
- Leopard
- School Management
- Wishlist for WooCommerce Pro
- Booking & Appointment Plugin for WooCommerce
- WordPress GDPR & CCPA
Looking for peace of mind and less tech stress?
Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.
Signup for one of our website care/management plans and get a tech-savvy team who are committed to your business.
Never worry about your website again.
Let Us Help YouHow Do I Update WordPress?
Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.
Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.
Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.
After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.