WordPress Vulnerability Report — October 30, 2024
Since last week, 312 new vulnerabilities emerged in the WordPress ecosystem including 306 plugins and 6 themes. 181 of the vulnerable plugins and themes remain unpatched.
Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.
Along with poor user account security, vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates. If this seems overwhelming, talk to us about a Website Care Plan.
WordPress Core
WordPress Themes
Themes With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).
- Digitally
- disconnected
- js paper
- my flatonica
- my wooden under construction
Themes With A Fix/Patch Available
- Mags
WordPress Plugins
Plugins With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).
- Email Template Customizer for WooCommerce
- Custom Icons for Elementor
- CURCY
- G Meta Keywords
- Surfer – WordPress Plugin
- Edwiser Bridge
- Lightbox slider
- WordPress Portfolio Builder
- Pinpoint Booking System
- Custom Add to Cart Button Label and Link
- Zoho CRM Lead Magnet
- Hyperlink Group Block
- Animator
- DPD Baltic Shipping
- Omnipress
- UltraAddons
- WP SendFox
- Simple Testimonials Showcase
- TAKETIN To WP Membership
- Easy Addons for Elementor
- UltimateAI
- AB Categories Search Widget
- ACL Floating Cart for WooCommerce
- Add Categories Post Footer
- ADIF Log Search Widget
- Advanced Advertising System
- Affiliator
- Agile Video Player Lite
- Ahime Image Printer
- Ahmeti Wp Timeline
- AI Image Generator for Your Content & Featured Images – AI Postpix
- Ajax Custom CSS/JS
- ajax-extend
- Ajax Rating with Custom Login
- Akismet htaccess writer
- All in One Slider
- Analyse Uploads
- Apa Banner Slider
- APA Register Newsletter Form
- Arkhe Blocks
- Author Discussion
- AVChat Video Chat
- Azz Anonim Posting
- Back Link Tracker
- Banner Slider
- Bet WC 2018 Russia
- Better Author Bio
- BuddyPress Better Registration
- Booking.com Banner Creator
- BuddyPress Greeting Message
- BP Member Type Manager
- Branding
- Bulk images optimizer
- bVerse Convert
- Campus Explorer Widget
- chatplusjp
- CJ Change Howdy
- Client Power Tools Portal
- Code Generate
- Cookie Scanner
- Coub
- Country Flags for Elementor
- Crazy Call To Action Box
- cSlider
- CSV Product Import Export for WooCommerce
- CWD 3D Image Gallery
- Digital Lottery
- DocumentPress
- Duplicate Title Validate
- Dynamic Elementor Addons
- Easy Menu Manager
- Easy Post Types
- EKC Tournament Manager
- Elemenda
- Extra Privacy for Elementor
- Feed Comments Number
- Whitelist
- Flat UI Button
- FREE DOWNLOAD MANAGER
- Free Stock Photos Foter
- Gantry 4 Framework
- GERRYWORKS Post by Mail
- GetResponse Forms
- Giveaway Boost
- Google Docs RSVP
- Google Map Locations
- GoogleDrive folder list
- TeploBot – Telegram Bot for WP
- iBryl Switch User
- Infinite-Scroll
- INK Official
- Job Board Manager for WordPress
- JiangQie Free Mini Program
- jLayer Parallax Slider
- Kento Post View Counter
- LaTeX2HTML
- leenk.me
- WordPress Gallery Plugin
- Linked Variation for WooCommerce
- Contact Forms, Live Support, CRM, Video Messages
- Maan Addons For Elementor
- Local Business Addons For Elementor
- El mejor Cluster
- Mighty Builder
- Mitm Bug Tracker
- Monitor.chat
- Movie Database
- My Reading Library
- MyTweetLinks
- Nice Backgrounds
- PDF-Rechnungsverwaltung
- Photo Gallery Builder
- photokit
- Property Lot Management System
- Portfolleo
- Product Customizer Light
- Product Website Showcase
- Rate Own Post
- Recently
- 3D Work In Progress
- WP REST API FNS
- Risk Warning Bar
- RS-Members
- SafetyForms
- SEO Manager
- SermonAudio Widgets
- Shipyaari Shipping Management
- Simple Code Insert Shortcode
- Simple Custom Admin
- Simple Load More
- SiteBuilder Dynamic Components
- Affiliate Platform
- Social Link Groups
- Social Share With Floating Bar
- Sovratec Case Management
- SSV Events
- SSV MailChimp
- Suki Sites Import
- SVG Captcha
- SW Contact Form
- Table of Contents Plus
- Tida URL Screenshot
- Tito
- Todo Custom Field
- uCAT – Next Story
- Unlimited Addon For Elementor
- Adding drop down roles in registration
- Verbalize WP
- VKontakte Wall Post
- Web Bricks Addons for Elementor
- Woocommerce Custom Profile Picture
- Edit WooCommerce Templates
- Woo Manage Fraud Orders
- Parcel Pro
- WooCommerce Maintenance Mode
- Woostagram Connect
- WordPress Video
- Category and Taxonomy Image
- Category and Taxonomy Meta Fields
- WP Dropbox Dropins
- WordPress Image SEO
- Simple User Registration
- SendGrid for WordPress
- WP-Spreadplugin
- wpPricing Builder
- Wsify Widget
Plugins With A Fix/Patch Available
The vulnerability(ies) have been patched. You should update to the latest version.
- Elementor Website Builder
- WooCommerce
- All-in-One WP Migration and Backup
- Jetpack
- Secure Custom Fields
- Forminator Forms
- Royal Elementor Addons and Templates
- Ad Inserter
- Simple Custom Post Order
- Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
- Responsive Lightbox & Gallery
- Custom Twitter Feeds – A Tweets Widget or X Feed Widget
- GiveWP
- Translate WordPress – Google Language Translator
- Schema & Structured Data for WP & AMP
- Discount Rules for WooCommerce
- WP Content Copy Protection & No Right Click
- SlimStat Analytics
- WP ULike
- Exclusive Addons for Elementor
- WP-Members Membership Plugin
- Calculated Fields Form
- Qi Blocks
- Photo Gallery, Images, Slider in Rbs Image Gallery
- Simple Membership
- Sina Extension for Elementor
- Product Filter by WBW
- Appointment Booking Calendar
- Themesflat Addons For Elementor
- WPIDE – File Manager & Code Editor
- Timetable and Event Schedule by MotoPress
- Persian WooCommerce SMS
- VOD Infomaniak
- Logo Slider
- Co-Authors, Multiple Authors and Guest Authors
- Backup and Staging by WP Time Capsule
- AffiliateX
- Mega Elements
- Multiline files upload for contact form 7
- WooCommerce Bulk Edit Products, Orders, Coupons
- WP Photo Album Plus
- WP VR
- Add Widget After Content
- Contact Form by Supsystic
- Awesome Contact Form7 for Elementor
- Events Addon for Elementor
- Event Manager and Tickets Selling Plugin for WooCommerce
- Primary Addon for Elementor
- Admin Management Xtended
- Customer Email Verification for WooCommerce
- WP ERP | Complete HR solution with recruitment & job listings
- ProfileGrid
- Kama SpamBlock
- WP Popup Builder
- Arconix Shortcodes
- ElementsReady Addons for Elementor
- ElementInvader Addons for Elementor
- WPKoi Templates for Elementor
- PeproDev Ultimate Invoice
- Fonto
- Parallax Image
- Community by PeepSo
- RSS Feed Widget
- Accordion Slider
- Anchor Episodes Index (Spotify for Podcasters)
- Smart Online Order for Clover
- Flexmls® IDX Plugin
- Htaccess File Editor
- Leyka
- MAS Companies For WP Job Manager
- My Wp Brand
- Smart Blocks
- WP Timetics
- Advanced Category and Custom Taxonomy Image
- AppPresser
- Great Restaurant Menu WP
- Clio Grow Form
- Encyclopedia / Glossary / Wiki
- HD Quiz – Save Results Light
- IdeaPush
- Landing Page Cat
- Locatoraid Store Locator
- Most And Least Read Posts Widget
- My Favorites
- myCred Elementor
- News Kit Elementor Addons
- ReDi Restaurant Reservation
- WordPress Social Share Buttons
- StreamWeasels Twitch Integration
- Sunshine Photo Cart
- Click to Chat
- WP Flow Plus
- Photo Gallery Slideshow & Masonry Tiled Gallery
- The Ultimate WordPress Toolkit – WP Extended
- Zita Elementor Site Library
- SendPulse Free Web Push
- MAS Elementor
- Time Clock
- WP Sessions Time Monitoring Full Automatic
- Plexx Elementor Extension
- AADMY – Add Auto Date Month Year Into Posts
- Rover IDX
- Da Reactions
- Point Maker
- Endless Posts Navigation
- Miniorange OTP Verification with Firebase
- WP 2FA with Telegram
- WP Education
- Debrandify · Remove or Replace WordPress Branding
- Advanced Custom Fields PRO
- Cooked Pro
- EventON Pro
- Nextend Social Login Pro
- Social Auto Poster
- Time Clock Pro
- File Manager Pro
Looking for peace of mind and less tech stress?
Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.
Signup for one of our website care/management plans and get a tech-savvy team who are committed to your business.
Never worry about your website again.
Let Us Help YouHow Do I Update WordPress?
Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.
Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.
Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.
After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.