WordPress Vulnerability Report — October 9, 2024
Since last week, 182 new vulnerabilities emerged in the WordPress ecosystem including 177 plugins and 5 themes. 45 of the vulnerable plugins remain unpatched!
Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.
Along with poor user account security, vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates.
If this seems overwhelming, talk to us about a Website Care Plan.
WordPress Core
WordPress Themes
Themes With No Fix/Patch Available
- Empowerment
- UltraPress
- Unseen Blog
Themes With A Fix/Patch Available
- Create
- Full Frame
WordPress Plugins
Plugins With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).
- Soumettre.fr
- Loggedin – Limit Active Logins
- BuddyPress Docs
- DK PDF
- Copyscape Premium
- Keap Official Opt-in Forms
- Online Booking & Scheduling Calendar
- Include Fussball.de Widgets
- LH Copy Media File
- Payflex Payment Gateway
- RumbleTalk Live Group Chat
- VdoCipher: Secure Video Player and Hosting
- Hello World
- 123.chat
- Aggregator Advanced Settings
- Auto Featured Image from Title
- Captcha Bank
- Confetti Fall Animation
- Custom Banners
- Display Medium Posts
- Easy Load More
- Elastik Page Builder
- Gravity Forms Toolbar
- Guten Post Layout
- Iconize
- KB Support
- LocateAndFilter
- Login Logout Shortcode
- Optin Hound
- PDF Image Generator
- R Animated Icon
- Relogo
- Spice Starter Sites
- SVG Complete
- Wechat Social login
- WooCommerce – Store Exporter
- WP Blocks Hub
- WP Cleanup and Basic Functions
- WP Easy Gallery
- XO Slider
Plugins With A Fix/Patch Available
The vulnerability(ies) have been patched. You should update to the latest version.
- LiteSpeed Cache
- Rank Math SEO
- Advanced Custom Fields
- Popup Maker
- Broken Link Checker
- Contact Form Plugin by Fluent Forms
- Happy Addons for Elementor
- Royal Elementor Addons and Templates
- Checkout Field Editor (Checkout Manager) for WooCommerce
- Unlimited Elements For Elementor
- SEOPress – On-site SEO
- Jeg Elementor Kit
- TinyPNG
- Ultimate Member
- Smart Custom 404 Error Page
- Elementor Addon Elements
- Shortcodes and extra features for Phlox theme
- Element Pack Elementor Addons
- Slider & Popup Builder by Depicter
- Essential Blocks
- Strong Testimonials
- The Post Grid
- WooCommerce Multilingual & Multicurrency with WPML
- Email Subscribers by Icegram Express
- WP Bulk Delete
- WordPress Infinite Scroll
- Bold Page Builder
- WP Booking Calendar
- Photo Gallery, Images, Slider in Rbs Image Gallery
- Ultimate Blocks – WordPress Blocks Plugin
- Visual CSS Style Editor
- DethemeKit For Elementor
- Page-list
- Starbox
- YITH WooCommerce Ajax Search
- Cost Calculator Builder
- Bit File Manager
- Ibtana
- RomethemeKit For Elementor
- Code Embed
- Simple Membership After Login Redirection
- Slider by 10Web
- Advanced Woo Labels
- Auto Amazon Links
- BA Book Everything
- Blockspare
- Demo Importer Plus
- Gallery Lightbox
- FAQ / Accordion / Docs
- LA-Studio Element Kit for Elementor
- MC4WP: Mailchimp Top Bar
- NEX-Forms
- Paid Membership Subscriptions
- Popularis Extra
- CartBounty
- YITH WooCommerce Product Add-Ons
- YML for Yandex Market
- Form plugin for WordPress
- MaxSlider
- Affiliate Program Suite
- Slideshow Gallery LITE
- WP Hotel Booking
- Themify Builder
- WP Compress
- Author Avatars List/Block
- Cozy Blocks
- Survey Maker
- ElementsReady Addons for Elementor
- ElementInvader Addons for Elementor
- Magazine Blocks
- Easy Mega Menu Plugin for WordPress
- WPMobile.App
- EventPrime
- Geo Mashup
- Quill Forms
- RabbitLoader
- AVIF Uploader
- Move Addons for Elementor
- Robokassa payment gateway for Woocommerce
- WP-Lister Lite for eBay
- Automatically Hierarchic Categories in Menu
- BSK Forms Blacklist
- Hash Form
- PWA
- Premium Blocks
- Search Analytics for WP
- Free Responsive Testimonials, Social Proof Reviews, and Customer Reviews
- The Pack Elementor addons
- WP-WebAuthn
- WPCOM Member
- XLTab
- Zotpress
- Post Form
- Enter Addons
- Fish and Ships
- Memberful
- Search Atlas SEO
- TNC PDF viewer
- Product Delivery Date for WooCommerce – Lite
- Logo Carousel
- BerqWP
- Image Optimizer, Resizer and CDN
- Social Web Suite
- Ultimate Store Kit
- Quantity Dynamic Pricing & Bulk Discounts for WooCommerce
- WP MyLinks
- WP Travel Gutenberg Blocks
- The Ultimate WordPress Toolkit
- ShiftController Employee Shift Scheduling
- QS Dark Mode Plugin
- Web Directory Free
- Limit Login Attempts (Spam Protection)
- Top Bar – PopUps
- Easy Demo Importer
- Advanced Custom Fields PRO
- LatePoint
- Slider Revolution
- Re:WP
- Echo RSS Feed Post Generator Plugin for WordPress
- Social Auto Poster
- JobSearch
- Affiliate Pro
Looking for peace of mind and less tech stress?
Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.
Signup for one of our website care/management plans and get a tech-savvy team who are committed to your business.
Never worry about your website again.
Let Us Help YouHow Do I Update WordPress?
Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.
Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.
Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.
After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.