Digital Chicks People Focused Tech Powered Logo

WordPress Vulnerability Report — September 25, 2024

Since last week, 72 new vulnerabilities emerged in the WordPress ecosystem including 66 plugins and 6 themes. 24 of the vulnerable plugins remain unpatched, so run those updates!

Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.

Along with poor user account security, vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates. If this seems overwhelming, talk to us about a Website Care Plan.

WordPress Core

No vulnerabilities disclosed!

WordPress Themes

Themes With No Fix/Patch Available

  • Blogvi
  • Roseta
  • Septera
  • Verbosa

Themes With A Fix/Patch Available

  • Houzez
  • Bricks Builder

WordPress Plugins

Plugins With No Fix/Patch Available

Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).

  • MC4WP: Mailchimp for WordPress
  • WCFM Marketplace
  • IMPress for IDX Broker
  • WPCargo Track & Trace
  • Product Carousel Slider & Grid Ultimate for WooCommerce
  • Spice Starter Sites
  • Gutenberg Blocks
  • Team Showcase
  • Multipurpose Ticket Booking Manager
  • Accordion Image Menu
  • Thanh Toán Quét Mã QR Code T? ??ng
  • Kodex Posts likes
  • Limit Login Attempts Plus
  • Logo Manager For Enamad
  • Posts reminder
  • WooCommerce Multiple Free Gift
  • WP Category Dropdown
  • WP Custom Fields Search
  • WP Easy Gallery

Plugins With A Fix/Patch Available

The vulnerability(ies) have been patched. You should update to the latest version.

  • MC4WP: Mailchimp for WordPress
  • W3 Total Cache
  • Backuply
  • Photo Gallery by 10Web
  • WooCommerce Multilingual & Multicurrency with WPML
  • FOX
  • Easy Digital Downloads
  • Pixel Cat – Conversion Pixel Manager
  • Koko Analytics
  • Quiz and Survey Master
  • Greenshift
  • Themify
  • Popup, Optin Form & Email Newsletters for Mailchimp, HubSpot, AWeber
  • SKT Templates
  • WP Hardening
  • BA Book Everything
  • Charitable – Donation Plugin for WordPress
  • Gum Elementor Addon
  • Maintenance Redirect
  • WP Booking System
  • WP Datepicker
  • Affiliate Program Suite
  • Radio Player
  • Seriously Simple Stats
  • WP Travel
  • Garden Gnome Package
  • Geo Mashup
  • Waitlist Woocommerce
  • PropertyHive
  • Simple Spoiler
  • Appointment & Event Booking Calendar Plugin
  • Post Form
  • AnWP Football Leagues
  • IdeaPush
  • Login with phone number
  • Share This Image
  • ShiftController Employee Shift Scheduling
  • Sunshine Photo Cart
  • MDTF – Meta Data and Taxonomies Filter
  • XT Ajax Add To Cart for WooCommerce
  • Webo-facto
  • WP Abstracts
  • Houzez Login Register
  • WooEvents

Looking for peace of mind and less tech stress?​

Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.

Signup for one of our website care/management plans and get a tech-savvy team who are committed to your business.

Never worry about your website again.

Let Us Help You

How Do I Update WordPress?

Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.

Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.

Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.

After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.

Tagged