IEyeNews

iLocal News Archives

WordPress Vulnerability Report — October 23, 2024

By Sarah Zuercher From SolidWP

Sarah Zuercher

Sarah has been with StellarWP since 2024. As our marketing generalist, she spends her day writing content and completing projects for SolidWP, LearnDash, and The Events Calendar. In her free time, Sarah can be found playing pickleball, enjoying coffee at a local coffee shop, and spending time with her husband.

IIn this report, 312 vulnerabilities have been publicly disclosed. Security patches for 131 of these plugins and themes are available now, so run those updates as soon as possible. If you’re a Solid Security Pro user, the version management tool may have already warned you and updated these plugins, depending on your settings.

Additionally, there are 181 plugin and theme vulnerabilities with no patch available yet. If you’re a Solid Security Pro user, those vulnerabilities are already protected by the Solid Security firewallVirtual patches from Patchstack will be applied when a vulnerability is considered high or medium risk. If no patch is forthcoming from the vendor or the vulnerable software has been marked “closed” and dropped from the official WordPress repositories, you should deactivate it soon and look for alternative solutions.

Along with poor user account security, vulnerable plugins and themes are among the top reasons why WordPress websites get hacked. Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.

Table of Contents

  1. 1. WordPress Core
  2. 2. WordPress Plugins — 130 Patched / 176 Unpatched
    1. 2.1 Email Template Customizer for WooCommerce
    2. 2.2 Custom Icons for Elementor
    3. 2.3 CURCY – Multi Currency for WooCommerce – The best free currency exchange plugin – Run smoothly on WooCommerce 8.x
    4. 2.4 G Meta Keywords
    5. 2.5 Surfer – WordPress Plugin
    6. 2.6 Edwiser Bridge – WordPress Moodle LMS Integration
    7. 2.7 Edwiser Bridge – WordPress Moodle LMS Integration
    8. 2.8 Lightbox slider – Responsive Lightbox Gallery
    9. 2.9 WordPress Portfolio Builder – Portfolio Gallery
    10. 2.10 Pinpoint Booking System – #1 WordPress Booking Plugin
    11. 2.11 Custom Add to Cart Button Label and Link
    12. 2.12 Zoho CRM Lead Magnet
    13. 2.13 Hyperlink Group Block
    14. 2.14 Animator – Scroll Triggered Animations
    15. 2.15 DPD Baltic Shipping
    16. 2.16 Omnipress
    17. 2.17 UltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode)
    18. 2.18 WP SendFox
    19. 2.19 Simple Testimonials Showcase
    20. 2.20 TAKETIN To WP Membership
    21. 2.21 Easy Addons for Elementor
    22. 2.22 UltimateAI
    23. 2.23 UltimateAI
    24. 2.24 AB Categories Search Widget 
    25. 2.25 ACL Floating Cart for WooCommerce
    26. 2.26 Add Categories Post Footer
    27. 2.27 ADIF Log Search Widget
    28. 2.28 Advanced Advertising System
    29. 2.29 Affiliator
    30. 2.30 Agile Video Player Lite
    31. 2.31 Ahime Image Printer
    32. 2.32 Ahmeti Wp Timeline
    33. 2.33 AI Image Generator for Your Content & Featured Images – AI Postpix
    34. 2.34 Ajax Custom CSS/JS
    35. 2.35 ajax-extend
    36. 2.36 Ajax Rating with Custom Login
    37. 2.37 Akismet htaccess writer
    38. 2.38 All in One Slider
    39. 2.39 Analyse Uploads
    40. 2.40 Apa Banner Slider
    41. 2.41 APA Register Newsletter Form
    42. 2.42 Arkhe Blocks
    43. 2.43 Author Discussion
    44. 2.44 AVChat Video Chat
    45. 2.45 Azz Anonim Posting
    46. 2.46 Back Link Tracker
    47. 2.47 Banner Slider
    48. 2.48 Bet WC 2018 Russia
    49. 2.49 Better Author Bio
    50. 2.50 BuddyPress Better Registration
    51. 2.51 Booking.com Banner Creator
    52. 2.52 BuddyPress Greeting Message
    53. 2.53 BP Member Type Manager
    54. 2.54 Branding
    55. 2.55 Bulk images optimizer
    56. 2.56 bVerse Convert
    57. 2.57 Campus Explorer Widget
    58. 2.58 chatplusjp
    59. 2.59 CJ Change Howdy
    60. 2.60 Client Power Tools Portal
    61. 2.61 Code Generate
    62. 2.62 Cookie Scanner
    63. 2.63 Coub
    64. 2.64 Country Flags for Elementor
    65. 2.65 Crazy Call To Action Box
    66. 2.66 cSlider
    67. 2.67 CSV Product Import Export for WooCommerce
    68. 2.68 CWD 3D Image Gallery
    69. 2.69 Digital Lottery
    70. 2.70 DocumentPress
    71. 2.71 Duplicate Title Validate
    72. 2.72 Dynamic Elementor Addons
    73. 2.73 Easy Menu Manager
    74. 2.74 Easy Post Types
    75. 2.75 Easy Post Types
    76. 2.76 Easy Post Types
    77. 2.77 EKC Tournament Manager
    78. 2.78 Elemenda
    79. 2.79 Extra Privacy for Elementor
    80. 2.80 Feed Comments Number
    81. 2.81 FERMA.ru.net
    82. 2.82 Whitelist
    83. 2.83 Flat UI Button
    84. 2.84 FREE DOWNLOAD MANAGER
    85. 2.85 Free Stock Photos Foter
    86. 2.86 Gantry 4 Framework
    87. 2.87 GERRYWORKS Post by Mail
    88. 2.88 GetResponse Forms
    89. 2.89 Giveaway Boost
    90. 2.90 Google Docs RSVP
    91. 2.91 Google Map Locations
    92. 2.92 GoogleDrive folder list
    93. 2.93 TeploBot – Telegram Bot for WP
    94. 2.94 iBryl Switch User
    95. 2.95 Infinite-Scroll
    96. 2.96 INK Official
    97. 2.97 Job Board Manager for WordPress
    98. 2.98 JiangQie Free Mini Program
    99. 2.99 jLayer Parallax Slider
    100. 2.100 Kento Post View Counter
    101. 2.101 LaTeX2HTML
    102. 2.102 leenk.me
    103. 2.103 WordPress Gallery Plugin – Limb Image Gallery
    104. 2.104 WordPress Gallery Plugin – Limb Image Gallery
    105. 2.105 Linked Variation for WooCommerce
    106. 2.106 Contact Forms, Live Support, CRM, Video Messages
    107. 2.107 Maan Addons For Elementor
    108. 2.108 Local Business Addons For Elementor
    109. 2.109 El mejor Cluster
    110. 2.110 Mighty Builder
    111. 2.111 Mitm Bug Tracker
    112. 2.112 Monitor.chat
    113. 2.113 Movie Database
    114. 2.114 My Reading Library
    115. 2.115 MyTweetLinks
    116. 2.116 Nice Backgrounds
    117. 2.117 PDF-Rechnungsverwaltung
    118. 2.118 Photo Gallery Builder
    119. 2.119 photokit
    120. 2.120 Property Lot Management System
    121. 2.121 Portfolleo
    122. 2.122 Product Customizer Light
    123. 2.123 Product Website Showcase
    124. 2.124 Rate Own Post
    125. 2.125 Recently
    126. 2.126 3D Work In Progress
    127. 2.127 3D Work In Progress
    128. 2.128 WP REST API FNS
    129. 2.129 WP REST API FNS
    130. 2.130 Risk Warning Bar
    131. 2.131 RS-Members
    132. 2.132 SafetyForms
    133. 2.133 SEO Manager
    134. 2.134 SermonAudio Widgets
    135. 2.135 Shipyaari Shipping Management
    136. 2.136 Simple Code Insert Shortcode
    137. 2.137 Simple Custom Admin
    138. 2.138 Simple Load More
    139. 2.139 SiteBuilder Dynamic Components
    140. 2.140 Affiliate Platform
    141. 2.141 Social Link Groups
    142. 2.142 Social Share With Floating Bar
    143. 2.143 Sovratec Case Management
    144. 2.144 SSV Events
    145. 2.145 SSV MailChimp
    146. 2.146 Suki Sites Import
    147. 2.147 SVG Captcha
    148. 2.148 SW Contact Form
    149. 2.149 Table of Contents Plus
    150. 2.150 Tida URL Screenshot
    151. 2.151 Tito
    152. 2.152 Todo Custom Field
    153. 2.153 uCAT – Next Story
    154. 2.154 Unlimited Addon For Elementor
    155. 2.155 Adding drop down roles in registration
    156. 2.156 Verbalize WP
    157. 2.157 VKontakte Wall Post
    158. 2.158 Web Bricks Addons for Elementor
    159. 2.159 Woocommerce Custom Profile Picture
    160. 2.160 Edit WooCommerce Templates
    161. 2.161 Woo Manage Fraud Orders
    162. 2.162 Parcel Pro
    163. 2.163 WooCommerce Maintenance Mode
    164. 2.164 Woostagram Connect
    165. 2.165 WordPress Video
    166. 2.166 Category and Taxonomy Image
    167. 2.167 Category and Taxonomy Meta Fields
    168. 2.168 Category and Taxonomy Meta Fields
    169. 2.169 Category and Taxonomy Meta Fields
    170. 2.170 WP Dropbox Dropins
    171. 2.171 WordPress Image SEO
    172. 2.172 Simple User Registration
    173. 2.173 SendGrid for WordPress
    174. 2.174 WP-Spreadplugin
    175. 2.175 wpPricing Builder
    176. 2.176 Wsify Widget
    177. 2.177 Elementor Website Builder – More than Just a Page Builder
    178. 2.178 WooCommerce
    179. 2.179 All-in-One WP Migration and Backup
    180. 2.180 Jetpack – WP Security, Backup, Speed, & Growth
    181. 2.181 Secure Custom Fields
    182. 2.182 Forminator Forms – Contact Form, Payment Form & Custom Form Builder
    183. 2.183 Forminator Forms – Contact Form, Payment Form & Custom Form Builder
    184. 2.184 Royal Elementor Addons and Templates
    185. 2.185 Ad Inserter – Ad Manager & AdSense Ads
    186. 2.186 Simple Custom Post Order
    187. 2.187 Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
    188. 2.188 Responsive Lightbox & Gallery
    189. 2.189 Custom Twitter Feeds – A Tweets Widget or X Feed Widget
    190. 2.190 GiveWP – Donation Plugin and Fundraising Platform
    191. 2.191 Translate WordPress – Google Language Translator
    192. 2.192 Schema & Structured Data for WP & AMP
    193. 2.193 Discount Rules for WooCommerce – Create Smart WooCommerce Coupons & Discounts, Bulk Discount, BOGO Coupons
    194. 2.194 WP Content Copy Protection & No Right Click
    195. 2.195 SlimStat Analytics
    196. 2.196 WP ULike – All-in-One Engagement Toolkit
    197. 2.197 Exclusive Addons for Elementor
    198. 2.198 WP-Members Membership Plugin
    199. 2.199 Calculated Fields Form
    200. 2.200 Qi Blocks
    201. 2.201 Photo Gallery, Images, Slider in Rbs Image Gallery
    202. 2.202 Simple Membership
    203. 2.203 Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates)
    204. 2.204 Product Filter by WBW
    205. 2.205 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin
    206. 2.206 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin
    207. 2.207 Themesflat Addons For Elementor
    208. 2.208 WPIDE – File Manager & Code Editor
    209. 2.209 Timetable and Event Schedule by MotoPress
    210. 2.210 ?????? ????? ??????? Persian WooCommerce SMS
    211. 2.211 VOD Infomaniak
    212. 2.212 Logo Slider – Logo Carousel, Logo Showcase & Client Logo Slider WordPress Plugin
    213. 2.213 Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors
    214. 2.214 Backup and Staging by WP Time Capsule
    215. 2.215 AffiliateX – Affiliate Blocks for WordPress, Amazon, eBay, AliExpress Affiliates
    216. 2.216 Mega Elements – Addons for Elementor
    217. 2.217 Multiline files upload for contact form 7
    218. 2.218 WooCommerce Bulk Edit Products, Orders, Coupons, Any WordPress Post Type (Advanced) – Smart Manager
    219. 2.219 WP Photo Album Plus
    220. 2.220 WP VR – 360 Panorama and Virtual Tour Builder For WordPress
    221. 2.221 WP VR – 360 Panorama and Virtual Tour Builder For WordPress
    222. 2.222 Add Widget After Content
    223. 2.223 Contact Form by Supsystic
    224. 2.224 Awesome Contact Form7 for Elementor
    225. 2.225 Events Addon for Elementor
    226. 2.226 Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – WordPress Plugin
    227. 2.227 Primary Addon for Elementor
    228. 2.228 Admin Management Xtended
    229. 2.229 Customer Email Verification for WooCommerce
    230. 2.230 WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting
    231. 2.231 ProfileGrid – User Profiles, Groups and Communities
    232. 2.232 Kama SpamBlock
    233. 2.233 WP Popup Builder – Popup Forms and Marketing Lead Generation
    234. 2.234 Arconix Shortcodes
    235. 2.235 ElementsReady Addons for Elementor
    236. 2.236 ElementInvader Addons for Elementor
    237. 2.237 ElementInvader Addons for Elementor
    238. 2.238 WPKoi Templates for Elementor
    239. 2.239 PeproDev Ultimate Invoice
    240. 2.240 Fonto – Custom Web Fonts Manager
    241. 2.241 Parallax Image
    242. 2.242 Community by PeepSo – Social Network, Membership, Registration, User Profiles, Premium – Mobile App
    243. 2.243 RSS Feed Widget
    244. 2.244 Accordion Slider
    245. 2.245 Anchor Episodes Index (Spotify for Podcasters)
    246. 2.246 Smart Online Order for Clover
    247. 2.247 Smart Online Order for Clover
    248. 2.248 Flexmls® IDX Plugin
    249. 2.249 Htaccess File Editor – Easily Edit, Backup, Restore .htaccess file
    250. 2.250 Leyka
    251. 2.251 MAS Companies For WP Job Manager
    252. 2.252 My Wp Brand – Hide menu & Hide Plugin
    253. 2.253 Smart Blocks
    254. 2.254 WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin
    255. 2.255 Advanced Category and Custom Taxonomy Image
    256. 2.256 AppPresser – Mobile App Framework
    257. 2.257 Great Restaurant Menu WP
    258. 2.258 Clio Grow Form
    259. 2.259 Encyclopedia / Glossary / Wiki
    260. 2.260 HD Quiz – Save Results Light
    261. 2.261 IdeaPush
    262. 2.262 Landing Page Cat – Coming Soon Page, Maintenance Page & Squeeze Pages
    263. 2.263 Locatoraid Store Locator
    264. 2.264 Most And Least Read Posts Widget
    265. 2.265 My Favorites
    266. 2.266 myCred Elementor
    267. 2.267 News Kit Elementor Addons
    268. 2.268 ReDi Restaurant Reservation
    269. 2.269 WordPress Social Share Buttons
    270. 2.270 StreamWeasels Twitch Integration
    271. 2.271 Sunshine Photo Cart: Free Client Photo Galleries for Photographers
    272. 2.272 Click to Chat – WP Support All-in-One Floating Widget
    273. 2.273 Click to Chat – WP Support All-in-One Floating Widget
    274. 2.274 WP Flow Plus
    275. 2.275 Photo Gallery Slideshow & Masonry Tiled Gallery
    276. 2.276 The Ultimate WordPress Toolkit – WP Extended
    277. 2.277 Zita Elementor Site Library
    278. 2.278 SendPulse Free Web Push
    279. 2.279 MAS Elementor
    280. 2.280 Time Clock – A WordPress Employee & Volunteer Time Clock Plugin
    281. 2.281 WP Sessions Time Monitoring Full Automatic
    282. 2.282 Plexx Elementor Extension
    283. 2.283 AADMY – Add Auto Date Month Year Into Posts
    284. 2.284 Rover IDX
    285. 2.285 Rover IDX
    286. 2.286 Da Reactions
    287. 2.287 Point Maker
    288. 2.288 Endless Posts Navigation
    289. 2.289 Miniorange OTP Verification with Firebase
    290. 2.290 Miniorange OTP Verification with Firebase
    291. 2.291 Miniorange OTP Verification with Firebase
    292. 2.292 WP 2FA with Telegram
    293. 2.293 WP 2FA with Telegram
    294. 2.294 WP Education – Education WordPress Plugin for Elementor
    295. 2.295 Debrandify · Remove or Replace WordPress Branding
    296. 2.296 Advanced Custom Fields PRO
    297. 2.297 Cooked Pro
    298. 2.298 Cooked Pro
    299. 2.299 Cooked Pro
    300. 2.300 EventON Pro
    301. 2.301 Nextend Social Login Pro
    302. 2.302 Social Auto Poster
    303. 2.303 Time Clock Pro
    304. 2.304 File Manager Pro
    305. 2.305 File Manager Pro
    306. 2.306 File Manager Pro
  3. 3. WordPress Themes — 1 Patched / 5 Unpatched
    1. 3.1 Digitally
    2. 3.2 disconnected
    3. 3.3 js paper
    4. 3.4 my flatonica
    5. 3.5 my wooden under construction
    6. 3.6 Mags

Our WordPress Vulnerability Report covers the latest emerging WordPress plugin, theme, and core vulnerabilities. Each vulnerability will have a severity rating of LowMediumHigh, or Critical. Responsible disclosure of vulnerabilities is essential to keeping the WordPress community safe. Please share this report to help spread the word and make WordPress — and the web — more secure.

WordPress Core

WordPress 6.7 Beta 3 is available and ready for testing! This beta version of the WordPress software is under development. Please do not install, run, or test this version of WordPress on production or mission-critical websites. Instead, it is recommended you evaluate Beta 3 on a test server and site.

For more on this story and to keep up with all updates go to: SOLID WP

LEAVE A RESPONSE

Your email address will not be published. Required fields are marked *