WordPress Vulnerability Report — March 19, 2025
Since our last report, 173 vulnerabilities have been publicly disclosed. 110 of the vulnerable plugins and themes remain unpatched.
Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.
Along with poor user account security, vulnerable plugins & themes are one of the main reasons WordPress websites get hacked, so run those updates.
If this seems overwhelming, talk to us about a Website Management Plan.
WordPress Core
WordPress Themes
Themes With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should deactivate the themes(s).
- Civi
- JobCareer
- Zegen
Themes With A Fix/Patch Available
Disclosed vulnerability(ies) have been patched. You should update to the latest version.
- Design Comuni Italia
- Eco Nature
- Industrial
- Traveler
- Workreap
Looking for peace of mind and less tech stress?
Security, performance, backups, privacy, and much more – the list of tasks needed to keep your website performing at its peak can seem overwhelming and time-consuming.
Signup for one of our website care/management plans and get a tech-savvy team who are committed to your business.
Never worry about your website again.
Let Us Help YouWordPress Plugins
Plugins With No Fix/Patch Available
Disclosed vulnerability(ies) have not yet been patched. You should deactivate the plugin(s).
- Post Lockdown
- Picture Gallery
- CRM and Lead Management by vcita
- WP Email Delivery
- Video Share VOD
- MicroPayments
- amoCRM WebForm
- Another Events Calendar
- ArielBrailovsky-ViralAd
- AS English Admin
- Awesome Surveys
- Back To Top
- Bee Layer Slider
- binlayerpress
- Block Spam By Math Reloaded
- W3Counter Free Real-Time Web Stats
- BlogBuzzTime for WP
- CC-IMG-Shortcode
- Builder for Contact Form 7 by Webconstruct
- Contact Form 7 Select Box Editor Button
- Contact Us By Lord Linus
- Coronavirus (COVID-19) Notice Message
- Custom Dashboard Page
- custom-field-list-widget
- Custom top bar
- Delete Original Image
- Display Template Name
- Domain Theme
- DP ALTerminator
- Easy Image Display
- Email Keep
- Featured Posts Grid
- Frontpage category filter
- FTP Sync
- GetShop e-commerce
- GetSocial
- GNUCommerce
- GNUPress
- Go To Top
- Google News Editors Picks Feed Generator
- In Stock Mailer for WooCommerce
- Insert Code
- Lava Ajax Search
- LinkedIn Lite
- List Mixcloud
- List of Posts from each Category
- Login Logger
- Lunar
- MaxA/B
- Members page only for logged in users
- PHP/MySQL CPU performance statistics
- No Disposable Email
- pixelstats
- PluginPass
- Plugins Last Updated Column
- Portfolio and Projects
- Post Read Time
- price-calc
- Rankchecker.io Integration
- Comment Date and Gravatar remover
- Responsive Google Map
- REST API TO MiniProgram
- S3Bubble Media Streaming
- Schedule
- SEO Tools
- Simple Amazon Affiliate
- Social Snap
- Spam Byebye
- Tabbed Login Widget
- TabGarb Pro
- TBTestimonials
- ThemeEgg ToolKit
- Featured Image Thumbnail Grid
- Já-Já Pagamentos for WooCommerce
- WP Add Active Class To Menu Item
- WP Azure offload
- WP Bulk Post Duplicator
- WP Compare Tables
- WP Crowdfunding
- Hashtags
- WP Hide Admin Bar
- WP JobHunt
- WP Last Modified
- WP Login Control
- Mobile Themes
- WP No-Bot Question
- WP Performance Pack
- wordpress login form to anywhere
- WP Simple Slideshow
- Skitter Slideshow
- WP SVG Upload
- WP jQuery Persian Datepicker
- WPSchoolPress
- XV Random Quotes
- ZipList Recipe
- Zoorum Comments
Plugins With A Fix/Patch Available
The vulnerability(ies) have been patched. You should update to the latest version.
- WooCommerce
- All-in-One WP Migration and Backup
- Ad Inserter – Ad Manager & AdSense Ads
- GDPR Cookie Compliance
- Page Builder: Pagelayer
- LoginPress
- Download Manager
- ShareThis Dashboard for Google Analytics
- HUSKY – Products Filter Professional for WooCommerce
- ShopLentor
- Appointment Booking Calendar
- Uncanny Automator
- WP Recipe Maker
- DethemeKit for Elementor
- SecuPress Free
- Logo Slider
- InstaWP Connect
- WP Test Email
- Business Directory Plugin
- NEX-Forms
- Qubely
- Review Schema
- Finale Lite
- WordPress form builder plugin for contact forms, surveys and quizzes
- Thumbnail carousel slider
- WPCOM Member
- AppPresser
- WPCS – WordPress Currency Switcher Professional
- Event post
- Omnipress
- Simple Photo Feed
- Church Admin
- Maintenance Notice
- WATI Chat and Notification
- Skrill – WooCommerce
- Accounting for WooCommerce
- IP Based Login
- pipDisqus
- Formality
- WC Affiliate
- Appsero Helper
- BP Email Assign Templates
- WordPress Report Brute Force Attacks and Login Protection
- CM FAQ – Simplify support with an intuitive FAQ management tool
- AnalyticsWP
- Gtbabel
- Realteo
- Resido
- Search Filter Pro
- SoundRise Music
- VidoRev Extensions
How Do I Update WordPress?
Run a full backups of your website using the backup plugin you have installed -or- using the backup feature your web host provides.
Ideally you test major functions – like ecommerce, elearning, membership functionality on a staging server first. If you site is “heavily” customized, you should also test in a staging environgment first.
Perform your updates in the order of WordPress – Theme(s) – Plugin(s). Ideally you are making note of the before and after versions.
After completed, perform a visual inspection of your site and test critical functionality that may have been affected – contact forms, subscription buttons, purchasing etc.