WordPress Vulnerability Report — October 30, 2024
Since last week, 251 new vulnerabilities emerged in the WordPress ecosystem including 245 plugins and 6 themes. 110 of the vulnerable plugins and themes remain unpatched.
Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.
Along with poor user account security, vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates.
If this seems overwhelming, talk to us about a Website Care Plan.
WordPress Core
WordPress Themes
Themes With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).- js paper
Themes With A Fix/Patch Available
- Clean Retina
- Mags
- Meta News
- NewsCard
- Nioland
WordPress Plugins
Plugins With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).
- Countdown, Coming Soon, Maintenance
- DarkMySite
- ACL Floating Cart for WooCommerce
- Acnoo Flutter API
- Advanced Online Ordering and Delivery Platform
- Agile Video Player Lite
- AI Image Generator for Your Content & Featured Images
- Ajar in5 Embed
- Amilia Store
- AR For Woocommerce
- AR For WordPress
- Automatic Translation
- Bamazoo Button Generator
- Banner Slider
- Beek Widget Extention
- Bet WC 2018 Russia
- BuddyPress Greeting Message
- BP Member Type Manager
- Bstone Demo Importer
- Bulk Change Role
- Clever Addons for Elementor
- Campus Explorer Widget
- chatplusjp
- Code Generate
- Coub
- CWD 3D Image Gallery
- DocumentPress
- DS.DownloadList
- Editor Custom Color Palette
- EKC Tournament Manager
- Exam Matrix
- Extra Privacy for Elementor
- Whitelist
- Google Docs RSVP
- TeploBot – Telegram Bot for WP
- iBryl Switch User
- ID-SK Toolkit
- INK Official
- Kodex Posts likes
- League of Legends Shortcodes
- leenk.me
- MaanStore API
- Forms for Mailchimp by Optin Cat
- Local Business Addons For Elementor
- Marketing Automation by AZEXO
- Meetup
- Monitor.chat
- Monkee-Boy Essentials
- Multi Purpose Mail Form
- Order Notification for Telegram
- PegaPoll
- Portfolleo
- PriPre
- Realty Workstation
- 3D Work In Progress
- Risk Warning Bar
- RSVP ME
- Extensions by HocWP Team
- ScottCart
- Scrollbar by webxapp
- Shoutcast Icecast HTML5 Radio Player
- Signup Page
- Simple Custom Admin
- Simple Load More
- Simple News
- Affiliate Platform
- GRÜN spendino Spendenformular
- Stacks Mobile App Builder
- SVG Captcha
- 1-Click Login: Passwordless Authentication
- Textboxes
- Themes4WP YouTube External Subtitles
- Tida URL ScreenshotT
- odo Custom Field
- Token Login
- Trip Plan
- uCAT – Next Story
- Uix Shortcodes
- Verbalize WP
- WatchTowerHQ
- Sudan Payment Gateway for WooCommerce
- 10Web Social Post Feed
- Web Bricks Addons for Elementor
- Woocommerce Custom Profile Picture
- Woocommerce Product Design
- Woocommerce Quote Calculator
- WooCommerce Maintenance Mode
- Awesome Buttons
- WP Awesome Login
- Category and Taxonomy Image
- Category and Taxonomy Meta Fields
- WP donimedia carousel
- Plugin Propagator
- WP Query Console
- Raptor Editor
- WP show more
- WPS Telegram Chat
- WPSchoolPress
- Wux Blog Editor
- Editorial Assistant by Sovrn
Plugins With A Fix/Patch Available
The vulnerability(ies) have been patched. You should update to the latest version.
- All-in-One WP Migration and Backup
- Elementor Header & Footer Builder
- ElementsKit Elementor addons
- Ninja Forms
- Forminator Forms
- WP Shortcodes Plugin
- Royal Elementor Addons and Templates
- Breeze – WordPress Cache Plugin
- Templately – Elementor & Gutenberg Template Library
- PDF Invoices & Packing Slips for WooCommerce
- SEOPress – On-site SEO
- Astra Widgets
- Firelight Lightbox
- Qi Addons For Elementor
- Dear Flipbook
- AMP for WP
- Beaver Builder
- BuddyPress
- Conditional Fields for Contact Form 7
- Custom Twitter Feeds
- EmbedPress
- Schema & Structured Data for WP & AMP
- Download Monitor
- Import and export users and customers
- Comments – wpDiscuz
- Call / Contact Button
- Exclusive Addons for Elementor
- WP-Members Membership Plugin
- Bold Page Builder
- Qi Blocks
- Photo Gallery, Images, Slider in Rbs Image Gallery
- Product Filter by WBW
- WP Recipe Maker
- RSS Aggregator
- Post Grid and Gutenberg Blocks
- Simple Membership
- Post Grid Gutenberg Blocks and WordPress Blog Plugin
- Compact WP Audio Player
- Download Plugin
- File Upload Types by WPForms
- Greenshift – animation and page builder blocks
- Custom Icons for Elementor
- Futurio Extra
- HurryTimer
- Wp Social Login and Register Social Counter
- Backup and Staging by WP Time Capsule
- YITH WooCommerce Product Add-Ons
- AffiliateX
- Contact Form 7 + Telegram
- Envo’s Elementor Templates & Widgets for WooCommerce
- GeoDirectory
- Mega Elements – Addons for Elementor
- Multi Step Form
- Premium SEO Pack
- Qode Essential Addons
- Selection Lite
- WooCommerce Bulk Edit Products, Orders, Coupons, Any WordPress Post Type
- WP Booking System
- WP VR – 360 Panorama and Virtual Tour Builder For WordPress
- WooCommerce UPS Shipping – Live Rates and Access Points
- Event Manager and Tickets Selling Plugin for WooCommerce
- Contact Form 7 – Repeatable Fields
- WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting
- Poll Maker – Versus Polls, Anonymous Polls, Image Polls
- Nexter Blocks
- Cozy Blocks – Page Builder for Gutenberg & Site Editor
- Survey Maker
- MultiVendorX
- Magazine Blocks
- WPKoi Templates for Elementor
- EventPrime
- WP Crowdfunding
- Extra Product Options Builder for WooCommerce
- WP Adminify
- Ads.txt & App-ads.txt Manager for WordPress
- Anchor Episodes Index (Spotify for Podcasters)
- Masteriyo LMS
- Mapster WP Maps
- My Wp Brand – Hide menu & Hide Plugin
- Sky Addons for Elementor
- The Pack Elementor addons
- Advanced Sermons
- App Builder
- Great Restaurant Menu WP
- Church Admin
- CodePen Embedded Pens Shortcode
- HD Quiz – Save Results Light
- Interactive World Map
- Landing Page Cat – Coming Soon Page, Maintenance Page & Squeeze Pages
- myCred Elementor
- News Kit Elementor Addons
- PDF Generator Addon for Elementor Page Builder
Posti Shipping - SEUR Oficial
- Sunshine Photo Cart
- Terms descriptions
- WP Flow Plus
- MDTF – Meta Data and Taxonomies Filter
- Accept Stripe Donation and Payments – AidWP
- Kata Plus – Addons for Elementor – Widgets, Extensions and Templates
- SurveyJS: Drag & Drop WordPress Form Builder
- WP Sessions Time Monitoring Full Automatic
- Namaste! LMS
- WP Abstracts
LaTeX2HTML - Rover IDX
- WPC Shop as a Customer for WooCommerce
- WordPress Post Grid Layouts with Pagination
- Booking Plugin for Your WordPress Appointments
- User Toolkit
- aDirectory
- Client Power Tools Portal
- Image Map Pro
- ProfilePress Pro
- WooCommerce Order Proposal
Looking for peace of mind and less tech stress?
Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.
Signup for one of our website care/management plans and get a tech-savvy team who are committed to your business.
Never worry about your website again.
Let Us Help YouHow Do I Update WordPress?
Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.
Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.
Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.
After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.