WordPress Vulnerability Report — October 16, 2024
Since last week, 176 new vulnerabilities emerged in the WordPress ecosystem including 173 plugins and 3 themes. 89 of the vulnerable plugins and themes remain unpatched.
Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.
Along with poor user account security, vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates. If this seems overwhelming, talk to us about a Website Care Plan.
WordPress Core
WordPress Themes
Themes With No Fix/Patch Available
- disconnected
- my flatonica
- my wooden under construction
Themes With A Fix/Patch Available
No fix/patch available!WordPress Plugins
Plugins With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).
- TI WooCommerce Wishlist
- BuddyPress Docs
- Youzify
- Linkz.ai
- 2D Tag Cloud
- AB Categories Search Widget
- ACF Images Search And Insert
- Add Categories Post Footer
- ADIF Log Search Widget
- Advanced Blocks Pro
- Ahime Image Printer
- Ahmeti Wp Timeline
- Ajax Custom CSS/JS
- ajax-extend
- Ajax Rating with Custom Login
- Analyse Uploads
- Arkhe Blocks
- Azz Anonim Posting
- Better Author Bio
- BuddyPress Better Registration
- Booking.com Banner Creator
- Bot for Telegram on WooCommerce
- bVerse Convert
- CJ Change Howdy
- Cookie Scanner
- Country Flags for Elementor
- Crazy Call To Action Box
- Creates 3D Flipbook, PDF Flipbook
- cSlider
- WP Builder
- CSV Product Import Export for WooCommerce
- Curator.io
- Digital Lottery
- Disc Golf Manager
- Dynamic Elementor Addons
- Easy Social Share Buttons
- Events Addon for Elementor
- External featured image from bing
- Featured Posts with Multiple Custom Groups
- Feed Comments Number
- Free Stock Photos Foter
- GDPR-Extensions-com
- Elementor Inline SVG
- IP Loc8
- Keep Backup Daily
- WordPress Gallery Plugin
- Linked Variation for WooCommerce
- Contact Forms, Live Support, CRM, Video MessagesMa
- an Addons For Elementor
- Forms for Mailchimp by Optin Cat
- Marketing and SEO Booster
- MAS Elementor
- El mejor Cluster
- Mighty Builder
- Mitm Bug Tracker
- My Favorites
- Mynx Page Builder
- Easy PayPal Gift Certificate
- Pedalo Connector
- Plexx Elementor Extension
- QA Analytics
- Read more By Adam
- Recently
- Restaurant Reservations Widget
- Shortcode For Elementor Templates
- Shortcodes AnyWhere
- Simple Baseball Scoreboard
- Table of Contents Plus
- TAKETIN To WP Membership
- Talkback
- Telecash Ricaricaweb
- Tito
- Unlimited Addon For Elementor
- Adding drop down roles in registration
- UserPlus
- WordPress Video
- WP-Spreadplugin
- WP Users Masquerade
wpPricing Builder
Wsify Widget
Plugins With A Fix/Patch Available
The vulnerability(ies) have been patched. You should update to the latest version.
- Elementor Website Builder
- WooCommerce
- Jetpack
- Secure Custom Fields
- TablePress
- Happy Addons for Elementor
- Royal Elementor Addons and Templates
- Ad Inserter – Ad Manager & AdSense Ads
- ShortPixel Image Optimizer
- Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
- Photo Gallery by 10Web
- Elementor Addon Elements
- Custom Twitter Feeds
- Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendinblue)
- Relevanssi
- Stackable
- The Plus Addons for Elementor
- WooCommerce Multilingual & Multicurrency with WPML
- ShopLentor
- SlimStat Analytics
- Photo Gallery, Images, Slider in Rbs Image Gallery
- Download Plugins and Themes in ZIP from Dashboard
- WPIDE
- FULL
- PowerPress Podcasting plugin by Blubrry
- VOD Infomaniak
- Embed PDF Viewer
- Smart Post Show
- WordPress File Upload
- Backup and Staging by WP Time Capsule
- Contact Form 7 – PayPal & Stripe Add-on
- Hunk Companion
- PublishPress Revisions
- WP Post Author
- Contact Form by Supsystic
- GutenKit
- CM Tooltip Glossary
- Primary Addon for Elementor
- Contact Form by Bit Form
- ProfileGrid
- Survey Maker
- Auto iFrame
- Easy Mega Menu Plugin for WordPress
- WP Ultimate Post Grid
- CubeWP
- Social Sharing (by Danny)
- Category Icon
- WordPress Comments Import & Export
- Products, Order & Customers Export for WooCommerce
- Htaccess File Editor
- Notification for Telegram
- Embed videos and respect privacy
- BlockMeister
- Smart Online Order for Clover
- Leyka
- SKT Blocks
- Smart Blocks
- IdeaPush
- Increase upload file size & Maximum Execution Time limit
- Language Switcher
- Maximum Products per User for WooCommerce
- Contact Form Widget
- Order Attachments for WooCommerce
- Rescue Shortcodes
- Image Optimizer, Resizer and CDN
- Tainacan
- wp-Monalisa
- WordPress WP-Advanced-Search
- AADMY
- Da Reactions
- Limit Login Attempts (Spam Protection)
- ImagePress
- pretix widget
- WP 2FA with Telegram
- SB Random Posts Widget
- Advanced Custom Fields PRO
- Bridge Core
- CMSMasters Content Composer
LatePoint
Social Auto Poster
Looking for peace of mind and less tech stress?
Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.
Signup for one of our website care/management plans and get a tech-savvy team who are committed to your business.
Never worry about your website again.
Let Us Help YouHow Do I Update WordPress?
Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.
Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.
Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.
After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.