WordPress Vulnerability Report — October 2, 2024
Since last week, 302 new vulnerabilities emerged in the WordPress ecosystem including 296 plugins and 6 themes. 86 of the vulnerable plugins remain unpatched!
Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.
Along with poor user account security, vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates. If this seems overwhelming, talk to us about a Website Care Plan.
WordPress Core
WordPress Themes
Themes With No Fix/Patch Available
- UltraPress
- Unseen Blog
- Viala
Themes With A Fix/Patch Available
- Catch Base
- Create
- Full Frame
WordPress Plugins
Plugins With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).
- Crowdsignal Dashboard – Polls, Surveys & more
- Contact Form to Any API
- EventPrime
- Premium Packages – Sell Digital Products Securely
- Community by PeepSo
- Copyscape Premium
- Keap Official Opt-in Forms
- Online Booking & Scheduling Calendar for WordPress
- Include Fussball.de Widgets
- Payflex Payment Gateway
- Terms descriptions
- Review & testimonial widgets
- VdoCipher: Secure Video Player and Hosting
- WPExperts Square For GiveWP
- Multipurpose Ticket Booking Manager
- 123.chat
- ABCApp Creator
- adstxt
- Thanh Toán Quét Mã QR Code T
- Charity Addon for Elementor
- Common Tools for Site
- Confetti Fall Animation
- Contact Form 7 Campaign Monitor Extension
Custom Banners - DK PDF
- Contact Form 7 Math Captcha
- Easy Load More
- Elastik Page Builder
- GF Custom Style
- Graphicsly
- Gravity Forms Toolbar
- GutenGeek Free Gutenberg Blocks for WordPress
- Hello World
- Iconize
- Instant Chat Floating Button for WordPress Websites
- Joy Of Text Lite
- KB Support
- king_IE
- Kodex Posts likes
- LH Copy Media File
- LocateAndFilter
- Loggedin
- Mapplic Lite
- Material Design Icons
- Medical Addon for Elementor
- MH Board
- nm-visitors
- OneElements
- Optin Hound
- PDF Image Generator
- Podiant
- R Animated Icon
- Relogo
- REST API TO MiniProgram
- RumbleTalk Live Group Chat
- WP Search Analytics
- Super Testimonials
- SVG Complete
- Themesflat Addons For Elementor
- Truepush
- Users Control
- Vmax Project Manager
- Wechat Social login
- WooCommerce – Store Exporter
- WP Category Dropdown
- WP Easy Gallery
- WP Free SSL
- WP GPX Map
- WP Newsletter Subscription
- Special Text Boxes
- WP Ticket Ultra Help Desk & Support Plugin
- WP-WebAuthn
- Spreadsheet Integration
- WPSPX
Plugins With A Fix/Patch Available
The vulnerability(ies) have been patched. You should update to the latest version.
- ZOOM Shortcodes
- LiteSpeed Cache
- MC4WP: Mailchimp for WordPress
- Starter Templates
- ElementsKit – Elementor addons
- W3 Total Cache
- Website Builder by SeedProd
- Ninja Forms
- Popup Maker
- Premium Addons for Elementor
- The Events Calendar
- Happy Addons for Elementor
- Templately
- Unlimited Elements For Elementor
- Jeg Elementor Kit
- Photo Gallery by 10Web
- TinyPNG
- Use Any Font | Custom Font Uploader
- Elementor Addon Elements
- Element Pack Elementor Addons
- Beaver Builder
- Slider & Popup Builder by Depicter
- Essential Blocks
- Advanced File Manager
- GiveWPStrong Testimonials
- The Post Grid
- HUSKY – Products Filter Professional for WooCommerce
- ShopLentor
- Download Monitor
- HT Mega – Absolute Addons For Elementor
- Jupiter X Core
- Email Subscribers by Icegram Express – Email Marketing, Newsletters,
- Automation for WordPress & WooCommerce
- WP ULike
- WP Bulk Delete
- Elementor Addons by Livemesh
- Simple Calendar
- Bold Page Builder
- Easy Digital Downloads
- Pixel Cat
- Form Maker by 10Web
- Ultimate Blocks
- Visual CSS Style Editor
- DethemeKit For Elementor
- Koko Analytics
- Page-list
- Post Grid and Gutenberg Blocks
- Quiz and Survey Master (QSM)
- YITH WooCommerce Ajax Search
- Cost Calculator Builder
- Ads by WPQuads – Adsense Ads, Banner Ads, Popup Ads
- Starbox
- Themify
- Accordion
- Popup, Optin Form & Email Newsletters
- MAS Static Content
- PWA for WP & AMP
- Simple Membership After Login Redirection
- Slider by 10Web
- WCFM – Frontend Manager for WooCommerce
- Recover WooCommerce Cart Abandonment
- Advanced Woo Labels
- ARI Fancy Lightbox
- BA Book Everything
- Blockspare
- Multi Step for Contact Form 7
- Charitable
- Classic Editor and Classic Widgets
- Gallery Lightbox
- Prisna GWT
- Gum Elementor Addon
- FAQ / Accordion / Docs
- LA-Studio Element Kit for Elementor
- Mega Elements – Addons for Elementor
- myCred
- NEX-Forms
- OSM – OpenStreetMap
- RomethemeKit For Elementor
- CartBounty
- WP Datepicker
- Mail logging
- YITH WooCommerce Product Add-Ons
- Form plugin for WordPress – Zoho Forms
- Absolute Reviews
- MaxSlider
- Affiliate Program Suite
- Fluent Support
- Primary Addon for Elementor
- Slideshow Gallery LITE
- WS Form LITE
- Contact Form by Bit Form
- ProfileGrid
- WP Compress
- Author Avatars List/Block
- Cozy Blocks
- Meta Slider and Carousel with Lightbox
- Radio Player
- Seriously Simple Stats
- WP Travel
- ElementInvader Addons for Elementor
- Garden Gnome Package
- Geo Mashup
- GEO my WP
- Revolut Gateway for WooCommerce
- Salon Booking System
- Easy Mega Menu Plugin for WordPress
- WPMobile.App
- Cities Shipping Zones for WooCommerce
- CubeWP Forms
- EU/UK VAT Manager for WooCommerce
- GTM Server Side
- Quill Forms
- Sight – Professional Image Gallery and Portfolio
- Wheel of Life: Coaching and Assessment Tool for Life Coach
- WP-DownloadManager
- AVIF Uploader
- Move Addons for Elementor
- Multiple Page Generator Plugin – MPG
- Newsletters
- Store Hours for WooCommerce
- Robokassa payment gateway for Woocommerce
- Appointment & Event Booking Calendar Plugin
- WP-Lister Lite for eBay
- Zoho Flow for WordPress
- Automatically Hierarchic Categories in Menu
- Beam me up Scotty
- BSK Forms Blacklist
- Bulk NoIndex & NoFollow Toolkit
- Chartify – WordPress Chart Plugin
- Premium Blocks
- Restaurant & Cafe Addon for Elementor
- Share This Image
- Simple LDAP Login
- Sky Addons for Elementor
- Free Responsive Testimonials
- Loops & Logic
- The Pack Elementor addons
- Directory Listings WordPress plugin
- WordPress Simple HTML Sitemap
- WPCOM Member
- XLTab
- ZotpressPost Form
- Polls CP
- Daily Prayer Time
- Easy PayPal Events
- Product Enquiry for WooCommerce, WooCommerce product catalog
- Enter Addons
- AnWP Football Leagues
- IdeaPush
- JoomSport
- Search Atlas SEO
- NiceJob
- TNC PDF viewer
- Logo Carousel
- ShiftController Employee Shift Scheduling
- Sunshine Photo Cart: Free Client Photo Galleries for Photographers
- Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder,
- Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider
- MDTF – Meta Data and Taxonomies Filter
- WP MyLinks
- WP Travel Gutenberg Blocks
- The Ultimate WordPress Toolkit – WP Extended
- XT Ajax Add To Cart for WooCommerce
- Themedy Toolbox
- VR Calendar
- Checkout Mestres do WP for WooCommerce
- QS Dark Mode Plugin
- Web Directory Free
- WP Abstracts
- AI ChatBot with ChatGPT and Content Generator by AYS
- CSS JS Files
- Top Bar – PopUps
- Chatbot with ChatGPT WordPress
- Slider Revolution
- Secure Copy Content Protection and Content Locking
- Social Auto Poster
- Uncanny Groups for LearnDash
- WooEvents
- JobSearch
- WP MultiTasking
- WP Timeline – Vertical and Horizontal timeline plugin
Looking for peace of mind and less tech stress?
Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.
Signup for one of our website care/management plans and get a tech-savvy team who are committed to your business.
Never worry about your website again.
Let Us Help YouHow Do I Update WordPress?
Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.
Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.
Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.
After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.