Digital Chicks People Focused Tech Powered Logo

WordPress Vulnerability Report — September 4, 2024

Since last week, 167 new vulnerabilities emerged in the WordPress ecosystem including 143 plugins and 24 themes. 69 of the vulnerable plugins and themes remain unpatched, so run those updates as soon as possible.

Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.

Along with poor user account security, vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates. If this seems overwhelming, talk to us about a Website Care Plan.

WordPress Core

No vulnerabilities disclosed!

WordPress Themes

Themes With No Fix/Patch Available

Disclosed vulnerability(ies) have not yet been patched. You should switch the theme if no fix is forthcoming.

  • Esotera
  • Fluida
  • Hotel Galaxy
  • IntoTheDark
  • Kahuna
  • Liquido
  • Mantra
  • Mystique
  • Nirvana
  • Parabola
  • Posterity
  • Sliding Door
  • Tempera
  • Betheme
  • Enfold
  • Filmix
  • Opor Ayam

Themes With A Fix/Patch Available

Disclosed vulnerability(ies) have not been patched.

  • Attire
  • Blockbooster
  • Blogpoet
  • FotaWP
  • ReviveNews
  • Masterstudy LMS Starter

WordPress Plugins

Plugins With No Fix/Patch Available

Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).

  • Popup Builder – Create highly converting, mobile friendly marketing popups
  • YARPP – Yet Another Related Posts Plugin
  • Premium Portfolio Features for Phlox theme
  • Custom Field Template
  • DSGVO All in one for WP
  • Premium SEO Pack
  • Like Button Rating
  • Maintenance & Coming Soon Redirect Animation
  • EU/UK VAT Manager for WooCommerce
  • Super Testimonials
  • SKT Blocks – Gutenberg based Page Builder
  • Web and WooCommerce Addons for WPBakery Builder
  • Classic Addons – WPBakery Page Builder
  • Custom Query Blocks
  • SendGrid for WordPress
  • Flaming Forms
  • Animated Number Counters
  • azurecurve Toggle Show/Hide
  • Blog Introduction
  • Brickscore
  • DN Popup
  • Droip
  • Enhanced Search Box
  • GHActivity
  • Gixaw Chat
  • ILC Thickbox
  • infolinks Ad Wrap
  • Justified Image Grid
  • LatePoint
  • LWS Affiliation
  • Memberpress
  • Misiek Paypal
  • Misiek Photo Album
  • Music Request Manager
  • Propovoice Pro
  • Review Ratings
  • Simple Headline Rotator
  • Special Feed Items
  • Vikinghammer Tweet
  • Viral Signup
  • Visual Sound (old)
  • WP Testimonial Widget
  • Z Y N I T H

Plugins With A Fix/Patch Available

The vulnerability(ies) have been patched. You should update to the latest version.

  • Ninja Forms
  • Page Builder Gutenberg Blocks
  • Contact Form Plugin
  • Royal Elementor Addons and Templates
  • HubSpot
  • Jeg Elementor Kit
  • Responsive Lightbox & Gallery
  • Beaver Builder
  • Email Address Encoder
  • EmbedPress
  • Gallery Plugin for WordPress
  • GiveWP
  • Mollie Payments for WooCommerce
  • NitroPack
  • Page Builder
  • The Plus Addons for Elementor
  • The Post Grid
  • Ninja Tables
  • Permalink Manager Lite
  • Reviews Feed
  • Theme Editor
  • WP Booking Calendar
  • Shield Security – Smart Bot Blocking & Intrusion Prevention Security
  • Visual CSS Style Editor
  • Gutentor
  • Quiz and Survey Master (QSM)
  • Gutenverse
  • Happyforms
  • SureCart
  • WP Events Manager
  • MP3 Audio Player
  • WPZOOM Portfolio Lite
  • 140+ Widgets | Xpro Addons For Elementor – FREE
  • GeoDirectory
  • Generate Images
  • Media Library Folders
  • WP Accessibility Helper (WAH)
  • Clean Login
  • WP Deliciou
  • easy.jobs
  • GetPaid
  • Logo Showcase Ultimate
  • Podlove Podcast Publisher
  • WPMobile.App
  • Relevanssi Live Ajax Search
  • WP Crowdfunding
  • Collapsing Archives
  • HelloAsso
  • Name Directory
  • Spiffy Calendar
  • Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor
  • Share This Image
  • WP Timetics
  • Bus Ticket Booking with Seat Reservation
  • Sunshine Photo Cart
  • Tourfic
  • Front End Users
  • Taxi Booking Manager for WooCommerce
  • Web Directory Free
  • Favicon Generator (CLOSED)
  • Login As Users
  • Web Application Firewall
  • Two-factor authentication (formerly IP Vault)
  • ElementsKit Pro
  • The Events Calendar PRO
  • Funnel Kit Funnel Builder PRO
  • Greenshift Query and Meta Addon
  • Greenshift Woocommerce Addon
  • Memberpress
  • Newspack
  • Oxygen Builder
  • Super Store Finder
  • tagDiv Composer
  • Tutor LMS Pro
  • WP Armour Extended
  • WP Cerber Security
  • JobSearch

Looking for peace of mind and less tech stress?​

Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.

Signup for one of our website care/management plans and get a tech-savvy team who are committed to your business.

Never worry about your website again.

Let Us Help You

How Do I Update WordPress?

Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.

Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.

Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.

After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.

Tagged