WordPress Vulnerability Report — September 18, 2024
Since last week, 102 new vulnerabilities emerged in the WordPress ecosystem including 91 plugins and 11 themes. 32 of the vulnerable plugins remain unpatched, so run those updates as soon as possible.
Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.
Along with poor user account security, vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates. If this seems overwhelming, talk to us about a Website Care Plan.
WordPress Core
WordPress Themes
Themes With No Fix/Patch Available
- Beauty
- Blogvi
- Delicate
- Neighborly
- Roseta
- Septera
- Tweaker5
- Verbosa
- Triton Lite
Themes With A Fix/Patch Available
- Betheme
- Bricks Builder
WordPress Plugins
Plugins With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).
- WCFM Marketplace
- IMPress for IDX Broker
- WPCargo Track & Trace
- Product Carousel Slider & Grid Ultimate for WooCommerce
- Spice Starter Sites
- Gutenberg Blocks
- Team Showcase
- Pocket Widget
- Adicon Server
- AZIndex
- Custom Post Limits
- Email Obfuscate Shortcode
- Exit Notifier
- Cron Jobs
- Roles & Capabilities
- Lucas String Replace
- MM-Breaking News
- Quick Code
- Slider comparison image before and after
- Visual Sound
- WooCommerce Multiple Free Gift
Plugins With A Fix/Patch Available
The vulnerability(ies) have been patched. You should update to the latest version.
- Elementor Website Builder
- Essential Addons for Elementor
- Popup Maker
- Migration, Backup, Staging
- Backuply
- Gallery Plugin for WordPress
- Floating Notification Bar, Sticky Menu on Scroll, Announcement Banner, and Sticky Header for Any Theme
- WooCommerce Multilingual & Multicurrency with WPML
- LearnPress
- Stream
- Tutor LMS
- AI Engine
- FOX
- Carousel Slider
- Post Grid and Gutenberg Blocks
- Appointment Booking Calendar
- Starbox
- Advanced WordPress Backgrounds
- Greenshift
- Logo Slider
- HTML5 Video Player
- Master Addons
- WP Editor
- Bit File Manager
- Giveaways and Contests by RafflePress
- SKT Templates
- WP Meta SEO
- WP Simple Booking Calendar
- WP Test Email
- Classified Listing
- CM Pop-Up Banners for WordPress
- Maintenance Redirect
- Product Slider for WooCommerce by PickPlugins
- WP Booking System
- WordPress Affiliates Plugin
- YITH Custom Login
- Easy Property Listings
- WP Delicious
- EventON
- Geo Mashup
- EventPrime
- MStore API
- Tag Groups is the Advanced Way to Display Your Taxonomy Terms
- Waitlist Woocommerce
- Community by PeepSo
- PropertyHive
- Simple Spoiler
- Spiffy Calendar
- Affiliate Super Assistent
- amCharts: Charts and Maps
- Post Form
- Floating Contact Button
- Login with phone number
- Nova Blocks by Pixelgrade
- PDF Thumbnail Generator
- Share This Image
- video carousel slider with lightbox
- WPFactory Helper
- Frontend Dashboard
- Flipping Cards
- NinjaTeam Header Footer Custom Code
- Fusion Builder
- WooCommerce Photo Reviews
Looking for peace of mind and less tech stress?
Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.
Signup for one of our website care/management plans and get a tech-savvy team who are committed to your business.
Never worry about your website again.
Let Us Help YouHow Do I Update WordPress?
Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.
Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.
Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.
After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.