WordPress Vulnerability Report — November 6, 2024
Since last week, 285 vulnerabilities have been publicly disclosed. Security patches for 99 of these plugins are available now.
Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.
Along with poor user account security, vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates.
If this seems overwhelming, talk to us about a Website Care Plan.
WordPress Core
No vulnerabilities disclosed!
WordPress Themes
Themes With No Fix/Patch Available
No vulnerabilities disclosed!Themes With A Fix/Patch Available
No vulnerabilities disclosed!WordPress Plugins
Plugins With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).- Countdown, Coming Soon, Maintenance
- WP Hotel Booking
- Design for Contact Form 7 Style WordPress Plugin
- Gift Cards (Gift Vouchers and Packages) (WooCommerce Supported)
- Administrator Z
- Simple Page Specific Sidebars
- Training – Courses
- All Post Contact Form
- Easy SVG Upload
- 3D Presentation
- 5 Stars Rating Funnel
- Aajoda Testimonials
- Bing Search API Integration
- Addressbook
- Admin SMS Alert
- Advanced Control Manager
- Advanced PDF Generator
- Ajax Content Filter
- Alley Elementor Widget
- AmaDiscount
- amazing neo icon font for elementor
- Amazon Associate Filter
- AMP Img Shortcode
- Ancient World Linked Data
- APK Downloader
- AR For Woocommerce
- Custom Author URL
- Awesome Progress Bar
- Awesome Shortcodes For Genesis
- AwesomePress
- Bigmart Elements
- Blrt WP Embed
- Bonway Static Block Editor
- bpmn.io
- Bulk Change Role
- Buooy Sticky Header
- Business
- Clever Addons for Elementor
- Clyp Code Explorer
- Content Syndication Toolkit Reader
- Conversion Helper
- Crypto
- Custom Admin Menu
- Daily Image
- Dashing Memberships
- DataMentor
- Definitive Addons for Elementor
- Display Terms Shortcode
- Domain Sharding
- Don’t Break The Code
- Doofinder
- (dp) AddThis
- DS.DownloadList
- e-shops
- eewee admin custom
- Elementary Addons
- Emoji Shortcode
- Enable Shortcodes inside Widgets,Comments and Experts
- EndomondoWP
- Events Manager Pro – extended
- Extender All In One For Elementor
- EzyOnlineBookings Online Booking System Widget
- Fabrica Synced Pattern Instances
- Featured Posts Scroll
- Firework Shoppable Live Video
- Flash Show And Hide Box
- Forms: 3rd-Party Post Again
- FriendStore for WooCommerce
- GDReseller
- Genoo
- Geotagged Media
- Get Quote For Woocommerce
- Gmap Point List
- GMO Social Connection
- Golf Tracker
- Satisfaction Reports from Help Scout
- Header Footer Composer for Elementor
- Helloprint
- Hoo Addons for Elementor
- Hover Video Preview
- HQ60 Fidelity Card
- ID-SK Toolkit
- Jigoshop – Store Exporter
- Jigoshop – Store Toolkit
- Kento Ads Rotator
- LH QR Codes
- Lodgix.com Vacation Rental Website Builder
- Loginplus
- Market 360 Viewer
- Marketing Automation by AZEXO
- Marquee Elementor with Posts
- Master Bar
- MasterBip para Elementor
- MDR Webmaster Tools
- Media Modal
- Meta Store Elements
- MG Post Contributors
- ML Responsive Audio player with playlist Shortcode
- Mobilize
- Multi Purpose Mail Form
- MyOrderDesk
- Narnoo Commerce Manager
- Naver Blog
- NMR Strava activities
- Porsline
- Website price calculator
- Pricer Ninja
- PropertyShift
- Quran Shortcode
- Random Featured Post
- Reftagger Shortcode
- Responsive Data Table
- Responsive Flickr Gallery
- RSVP ME
- Sales Page Addon – Elementor & Beaver Builder
- Saragna
- Search order by product SKU for WooCommerce
- Selar.co Widget
- Seo Free
- SH Slideshow
- Show Visitor IP Address
- Sided
- Simple Business Manager
- Easy Gallery
- Simple Goods
- Simple Job Manager
- Simple Modal
- Simplistic SEO
- SIP Reviews Shortcode for WooCommerce
- Skip To
- SKSDEV Toolkit
- Slicko
- Smart Mockups
- Stacks Mobile App Builder
- Stars SMTP Mailer
- Step by Step
- Sticky Social Bar
- Super Addons for Elementor
- SVT Simple
- T(-) Countdown
- Team Showcase and Slider
- TeleAdmin
- Themedy Toolbox
- ThemeFuse Maintenance Mode
- ThemeShark Templates & Widgets for Elementor
- TradeMe widgets
- SrcSet Responsive Images for WordPress
- Twitter @Anywhere Plus
- Twitter real time search scrolling
- TinyMCE
- UPDATE NOTIFICATIONS
- User Password Reset
- UW Freelancer
- Webriti Custom Login
- WeChat Subscribers Lite
- While Loading
- Widget or Sidebar Shortcode
- WM Zoom
- Woo Manage Fraud Orders
- Woocommerce Product Design
- Woocommerce Quote Calculator
- World Prayer Time
- WP Baidu Map
- WP-Basics
- WP Course Manager
- WP donimedia carousel
- Download-Mirror-Counter
- WP EASY RECIPE
- WP EIS
- WP Feature Box
- imPress
- WP MMenu Lite
- WP Simple Anchors Links
- Wp Slide Categorywise
- WP Visual Adverts
- WPGlobus Translate Options
- WPHelpful< Admin Amplify
Plugins With A Fix/Patch Available
The vulnerability(ies) have been patched. You should update to the latest version.
- LiteSpeed Cache
- All-in-One WP Migration and Backup
- Loginizer
- Ninja Forms
- Premium Addons for Elementor
- Forminator Forms
- Gutenberg Blocks with AI by Kadence WP
- Otter Blocks
- Photo Gallery by 10Web
- Element Pack Elementor Addons
- Beaver Builder
- Download Manager
- FileOrganizer
- Download Monitor
- Media Library Assistant
- Exclusive Addons for Elementor
- Post Grid Gutenberg Blocks and WordPress Blog Plugin
- Seriously Simple Podcasting
- Subscribe to Comments
- BetterLinks
- Appointment Booking Calendar Plugin and Scheduling Plugin
- Dynamic Widgets
- Wp Social Login and Register Social Counter
- 140+ Widgets | Xpro Addons For Elementor
- Contact Form 7 + Telegram
- Pricing Tables WordPress Plugin
- AI Power: Complete AI Pack
- ReCaptcha Integration for WordPress
- Bricksable for Bricks Builder
- Ultimate Bootstrap Elements for Elementor
- XT Floating Cart for WooCommerce
- WPAdverts
- Arconix Shortcodes
- ElementsReady Addons for Elementor
- JS Help Desk
- Magical Addons For Elementor
- SMS Alert Order Notifications
- Easy Accordion Gutenberg Block
- Move Addons for Elementor
- Multiple Page Generator Plugin – MPG
- Newsletters
- Paytium: Mollie payment forms & donations
- Tickera
- affiliate-toolkit
- Beds24 Online Booking
- Masteriyo LMS
- Responsive Filterable Portfolio
- Restaurant & Cafe Addon
- Zotpress
- aThemes Addons for Elementor
- BBP Core
- Black Widgets For Elementor
- Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce
- Contest Gallery
- WooCommerce Report
- Manage User Columns
- MyCurator Content Curation
- Post Status Notifier Lite
- Posti Shipping
- SEUR Oficial
- W3SPEEDSTER
- WPC Smart Messages for WooCommerce
- Group Chat & Video Chat by AtomChat
- StreamWeasels YouTube Integration
- WP Team – WordPress Team Member Plugin
- Sastra Essential Addons for Elementor
- HT Builder
- Custom post type templates for Elementor
- HT Politic – For Political WordPress Themes / Website
- Delisho – Recipe Widgets and Blocks
- Shortcodes Blocks Creator Ultimate
- Appointmind
- Basticom Framework
- Knowledge Base
- RLM Elementor Widgets Pack
- StreamWeasels Kick Integration
- User Toolkit
- WP Pocket URLs
- Elo Rating Shortcode
- W3P SEO
- SmartLink Dynamic URLs
- Platform.ly Official
- Realty by BestWebSoft
- Accordion title for Elementor
- Cresta Addons for Elementor
- FraudLabs Pro SMS Verification
- RSVPMaker for Toastmasters
- Audio Comparison Lite
- Loginizer Security
- Post Status Notifier Premium
- WooCommerce Social Login
Looking for peace of mind and less tech stress?
Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.
Signup for one of our website care/management plans and get a tech-savvy team who are committed to your business.
Never worry about your website again.
Let Us Help YouHow Do I Update WordPress?
Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.
Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.
Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.
After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.