By Sarah Zuercher From SolidWP

Sarah Zuercher

Sarah has been with StellarWP since 2024. As our marketing generalist, she spends her day writing content and completing projects for SolidWP, LearnDash, and The Events Calendar. In her free time, Sarah can be found playing pickleball, enjoying coffee at a local coffee shop, and spending time with her husband.

IIn this report, 312 vulnerabilities have been publicly disclosed. Security patches for 131 of these plugins and themes are available now, so run those updates as soon as possible. If you’re a Solid Security Pro user, the version management tool may have already warned you and updated these plugins, depending on your settings.

Additionally, there are 181 plugin and theme vulnerabilities with no patch available yet. If you’re a Solid Security Pro user, those vulnerabilities are already protected by the Solid Security firewall. Virtual patches from Patchstack will be applied when a vulnerability is considered high or medium risk. If no patch is forthcoming from the vendor or the vulnerable software has been marked “closed” and dropped from the official WordPress repositories, you should deactivate it soon and look for alternative solutions.

Along with poor user account security, vulnerable plugins and themes are among the top reasons why WordPress websites get hacked. Unfortunately, cyberattacks are increasing in volume and sophistication. They’re also increasingly aimed at small to mid-sized businesses.

Table of Contents

1. 1. WordPress Core
2. 2. WordPress Plugins — 130 Patched / 176 Unpatched
   1. 2.1 Email Template Customizer for WooCommerce
   2. 2.2 Custom Icons for Elementor
   3. 2.3 CURCY – Multi Currency for WooCommerce – The best free currency exchange plugin – Run smoothly on WooCommerce 8.x
   4. 2.4 G Meta Keywords
   5. 2.5 Surfer – WordPress Plugin
   6. 2.6 Edwiser Bridge – WordPress Moodle LMS Integration
   7. 2.7 Edwiser Bridge – WordPress Moodle LMS Integration
   8. 2.8 Lightbox slider – Responsive Lightbox Gallery
   9. 2.9 WordPress Portfolio Builder – Portfolio Gallery
   10. 2.10 Pinpoint Booking System – #1 WordPress Booking Plugin
   11. 2.11 Custom Add to Cart Button Label and Link
   12. 2.12 Zoho CRM Lead Magnet
   13. 2.13 Hyperlink Group Block
   14. 2.14 Animator – Scroll Triggered Animations
   15. 2.15 DPD Baltic Shipping
   16. 2.16 Omnipress
   17. 2.17 UltraAddons – Elementor Addons (Header Footer Builder, Custom Font, Custom CSS,Woo Widget, Menu Builder, Anywhere Elementor Shortcode)
   18. 2.18 WP SendFox
   19. 2.19 Simple Testimonials Showcase
   20. 2.20 TAKETIN To WP Membership
   21. 2.21 Easy Addons for Elementor
   22. 2.22 UltimateAI
   23. 2.23 UltimateAI
   24. 2.24 AB Categories Search Widget 
   25. 2.25 ACL Floating Cart for WooCommerce
   26. 2.26 Add Categories Post Footer
   27. 2.27 ADIF Log Search Widget
   28. 2.28 Advanced Advertising System
   29. 2.29 Affiliator
   30. 2.30 Agile Video Player Lite
   31. 2.31 Ahime Image Printer
   32. 2.32 Ahmeti Wp Timeline
   33. 2.33 AI Image Generator for Your Content & Featured Images – AI Postpix
   34. 2.34 Ajax Custom CSS/JS
   35. 2.35 ajax-extend
   36. 2.36 Ajax Rating with Custom Login
   37. 2.37 Akismet htaccess writer
   38. 2.38 All in One Slider
   39. 2.39 Analyse Uploads
   40. 2.40 Apa Banner Slider
   41. 2.41 APA Register Newsletter Form
   42. 2.42 Arkhe Blocks
   43. 2.43 Author Discussion
   44. 2.44 AVChat Video Chat
   45. 2.45 Azz Anonim Posting
   46. 2.46 Back Link Tracker
   47. 2.47 Banner Slider
   48. 2.48 Bet WC 2018 Russia
   49. 2.49 Better Author Bio
   50. 2.50 BuddyPress Better Registration
   51. 2.51 Booking.com Banner Creator
   52. 2.52 BuddyPress Greeting Message
   53. 2.53 BP Member Type Manager
   54. 2.54 Branding
   55. 2.55 Bulk images optimizer
   56. 2.56 bVerse Convert
   57. 2.57 Campus Explorer Widget
   58. 2.58 chatplusjp
   59. 2.59 CJ Change Howdy
   60. 2.60 Client Power Tools Portal
   61. 2.61 Code Generate
   62. 2.62 Cookie Scanner
   63. 2.63 Coub
   64. 2.64 Country Flags for Elementor
   65. 2.65 Crazy Call To Action Box
   66. 2.66 cSlider
   67. 2.67 CSV Product Import Export for WooCommerce
   68. 2.68 CWD 3D Image Gallery
   69. 2.69 Digital Lottery
   70. 2.70 DocumentPress
   71. 2.71 Duplicate Title Validate
   72. 2.72 Dynamic Elementor Addons
   73. 2.73 Easy Menu Manager
   74. 2.74 Easy Post Types
   75. 2.75 Easy Post Types
   76. 2.76 Easy Post Types
   77. 2.77 EKC Tournament Manager
   78. 2.78 Elemenda
   79. 2.79 Extra Privacy for Elementor
   80. 2.80 Feed Comments Number
   81. 2.81 FERMA.ru.net
   82. 2.82 Whitelist
   83. 2.83 Flat UI Button
   84. 2.84 FREE DOWNLOAD MANAGER
   85. 2.85 Free Stock Photos Foter
   86. 2.86 Gantry 4 Framework
   87. 2.87 GERRYWORKS Post by Mail
   88. 2.88 GetResponse Forms
   89. 2.89 Giveaway Boost
   90. 2.90 Google Docs RSVP
   91. 2.91 Google Map Locations
   92. 2.92 GoogleDrive folder list
   93. 2.93 TeploBot – Telegram Bot for WP
   94. 2.94 iBryl Switch User
   95. 2.95 Infinite-Scroll
   96. 2.96 INK Official
   97. 2.97 Job Board Manager for WordPress
   98. 2.98 JiangQie Free Mini Program
   99. 2.99 jLayer Parallax Slider
   100. 2.100 Kento Post View Counter
   101. 2.101 LaTeX2HTML
   102. 2.102 leenk.me
   103. 2.103 WordPress Gallery Plugin – Limb Image Gallery
   104. 2.104 WordPress Gallery Plugin – Limb Image Gallery
   105. 2.105 Linked Variation for WooCommerce
   106. 2.106 Contact Forms, Live Support, CRM, Video Messages
   107. 2.107 Maan Addons For Elementor
   108. 2.108 Local Business Addons For Elementor
   109. 2.109 El mejor Cluster
   110. 2.110 Mighty Builder
   111. 2.111 Mitm Bug Tracker
   112. 2.112 Monitor.chat
   113. 2.113 Movie Database
   114. 2.114 My Reading Library
   115. 2.115 MyTweetLinks
   116. 2.116 Nice Backgrounds
   117. 2.117 PDF-Rechnungsverwaltung
   118. 2.118 Photo Gallery Builder
   119. 2.119 photokit
   120. 2.120 Property Lot Management System
   121. 2.121 Portfolleo
   122. 2.122 Product Customizer Light
   123. 2.123 Product Website Showcase
   124. 2.124 Rate Own Post
   125. 2.125 Recently
   126. 2.126 3D Work In Progress
   127. 2.127 3D Work In Progress
   128. 2.128 WP REST API FNS
   129. 2.129 WP REST API FNS
   130. 2.130 Risk Warning Bar
   131. 2.131 RS-Members
   132. 2.132 SafetyForms
   133. 2.133 SEO Manager
   134. 2.134 SermonAudio Widgets
   135. 2.135 Shipyaari Shipping Management
   136. 2.136 Simple Code Insert Shortcode
   137. 2.137 Simple Custom Admin
   138. 2.138 Simple Load More
   139. 2.139 SiteBuilder Dynamic Components
   140. 2.140 Affiliate Platform
   141. 2.141 Social Link Groups
   142. 2.142 Social Share With Floating Bar
   143. 2.143 Sovratec Case Management
   144. 2.144 SSV Events
   145. 2.145 SSV MailChimp
   146. 2.146 Suki Sites Import
   147. 2.147 SVG Captcha
   148. 2.148 SW Contact Form
   149. 2.149 Table of Contents Plus
   150. 2.150 Tida URL Screenshot
   151. 2.151 Tito
   152. 2.152 Todo Custom Field
   153. 2.153 uCAT – Next Story
   154. 2.154 Unlimited Addon For Elementor
   155. 2.155 Adding drop down roles in registration
   156. 2.156 Verbalize WP
   157. 2.157 VKontakte Wall Post
   158. 2.158 Web Bricks Addons for Elementor
   159. 2.159 Woocommerce Custom Profile Picture
   160. 2.160 Edit WooCommerce Templates
   161. 2.161 Woo Manage Fraud Orders
   162. 2.162 Parcel Pro
   163. 2.163 WooCommerce Maintenance Mode
   164. 2.164 Woostagram Connect
   165. 2.165 WordPress Video
   166. 2.166 Category and Taxonomy Image
   167. 2.167 Category and Taxonomy Meta Fields
   168. 2.168 Category and Taxonomy Meta Fields
   169. 2.169 Category and Taxonomy Meta Fields
   170. 2.170 WP Dropbox Dropins
   171. 2.171 WordPress Image SEO
   172. 2.172 Simple User Registration
   173. 2.173 SendGrid for WordPress
   174. 2.174 WP-Spreadplugin
   175. 2.175 wpPricing Builder
   176. 2.176 Wsify Widget
   177. 2.177 Elementor Website Builder – More than Just a Page Builder
   178. 2.178 WooCommerce
   179. 2.179 All-in-One WP Migration and Backup
   180. 2.180 Jetpack – WP Security, Backup, Speed, & Growth
   181. 2.181 Secure Custom Fields
   182. 2.182 Forminator Forms – Contact Form, Payment Form & Custom Form Builder
   183. 2.183 Forminator Forms – Contact Form, Payment Form & Custom Form Builder
   184. 2.184 Royal Elementor Addons and Templates
   185. 2.185 Ad Inserter – Ad Manager & AdSense Ads
   186. 2.186 Simple Custom Post Order
   187. 2.187 Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
   188. 2.188 Responsive Lightbox & Gallery
   189. 2.189 Custom Twitter Feeds – A Tweets Widget or X Feed Widget
   190. 2.190 GiveWP – Donation Plugin and Fundraising Platform
   191. 2.191 Translate WordPress – Google Language Translator
   192. 2.192 Schema & Structured Data for WP & AMP
   193. 2.193 Discount Rules for WooCommerce – Create Smart WooCommerce Coupons & Discounts, Bulk Discount, BOGO Coupons
   194. 2.194 WP Content Copy Protection & No Right Click
   195. 2.195 SlimStat Analytics
   196. 2.196 WP ULike – All-in-One Engagement Toolkit
   197. 2.197 Exclusive Addons for Elementor
   198. 2.198 WP-Members Membership Plugin
   199. 2.199 Calculated Fields Form
   200. 2.200 Qi Blocks
   201. 2.201 Photo Gallery, Images, Slider in Rbs Image Gallery
   202. 2.202 Simple Membership
   203. 2.203 Sina Extension for Elementor (Slider, Gallery, Form, Modal, Data Table, Tab, Particle, Free Elementor Widgets & Elementor Templates)
   204. 2.204 Product Filter by WBW
   205. 2.205 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin
   206. 2.206 Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin
   207. 2.207 Themesflat Addons For Elementor
   208. 2.208 WPIDE – File Manager & Code Editor
   209. 2.209 Timetable and Event Schedule by MotoPress
   210. 2.210 ?????? ????? ??????? Persian WooCommerce SMS
   211. 2.211 VOD Infomaniak
   212. 2.212 Logo Slider – Logo Carousel, Logo Showcase & Client Logo Slider WordPress Plugin
   213. 2.213 Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors
   214. 2.214 Backup and Staging by WP Time Capsule
   215. 2.215 AffiliateX – Affiliate Blocks for WordPress, Amazon, eBay, AliExpress Affiliates
   216. 2.216 Mega Elements – Addons for Elementor
   217. 2.217 Multiline files upload for contact form 7
   218. 2.218 WooCommerce Bulk Edit Products, Orders, Coupons, Any WordPress Post Type (Advanced) – Smart Manager
   219. 2.219 WP Photo Album Plus
   220. 2.220 WP VR – 360 Panorama and Virtual Tour Builder For WordPress
   221. 2.221 WP VR – 360 Panorama and Virtual Tour Builder For WordPress
   222. 2.222 Add Widget After Content
   223. 2.223 Contact Form by Supsystic
   224. 2.224 Awesome Contact Form7 for Elementor
   225. 2.225 Events Addon for Elementor
   226. 2.226 Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – WordPress Plugin
   227. 2.227 Primary Addon for Elementor
   228. 2.228 Admin Management Xtended
   229. 2.229 Customer Email Verification for WooCommerce
   230. 2.230 WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting
   231. 2.231 ProfileGrid – User Profiles, Groups and Communities
   232. 2.232 Kama SpamBlock
   233. 2.233 WP Popup Builder – Popup Forms and Marketing Lead Generation
   234. 2.234 Arconix Shortcodes
   235. 2.235 ElementsReady Addons for Elementor
   236. 2.236 ElementInvader Addons for Elementor
   237. 2.237 ElementInvader Addons for Elementor
   238. 2.238 WPKoi Templates for Elementor
   239. 2.239 PeproDev Ultimate Invoice
   240. 2.240 Fonto – Custom Web Fonts Manager
   241. 2.241 Parallax Image
   242. 2.242 Community by PeepSo – Social Network, Membership, Registration, User Profiles, Premium – Mobile App
   243. 2.243 RSS Feed Widget
   244. 2.244 Accordion Slider
   245. 2.245 Anchor Episodes Index (Spotify for Podcasters)
   246. 2.246 Smart Online Order for Clover
   247. 2.247 Smart Online Order for Clover
   248. 2.248 Flexmls® IDX Plugin
   249. 2.249 Htaccess File Editor – Easily Edit, Backup, Restore .htaccess file
   250. 2.250 Leyka
   251. 2.251 MAS Companies For WP Job Manager
   252. 2.252 My Wp Brand – Hide menu & Hide Plugin
   253. 2.253 Smart Blocks
   254. 2.254 WP Timetics- AI-powered Appointment Booking Calendar and Online Scheduling Plugin
   255. 2.255 Advanced Category and Custom Taxonomy Image
   256. 2.256 AppPresser – Mobile App Framework
   257. 2.257 Great Restaurant Menu WP
   258. 2.258 Clio Grow Form
   259. 2.259 Encyclopedia / Glossary / Wiki
   260. 2.260 HD Quiz – Save Results Light
   261. 2.261 IdeaPush
   262. 2.262 Landing Page Cat – Coming Soon Page, Maintenance Page & Squeeze Pages
   263. 2.263 Locatoraid Store Locator
   264. 2.264 Most And Least Read Posts Widget
   265. 2.265 My Favorites
   266. 2.266 myCred Elementor
   267. 2.267 News Kit Elementor Addons
   268. 2.268 ReDi Restaurant Reservation
   269. 2.269 WordPress Social Share Buttons
   270. 2.270 StreamWeasels Twitch Integration
   271. 2.271 Sunshine Photo Cart: Free Client Photo Galleries for Photographers
   272. 2.272 Click to Chat – WP Support All-in-One Floating Widget
   273. 2.273 Click to Chat – WP Support All-in-One Floating Widget
   274. 2.274 WP Flow Plus
   275. 2.275 Photo Gallery Slideshow & Masonry Tiled Gallery
   276. 2.276 The Ultimate WordPress Toolkit – WP Extended
   277. 2.277 Zita Elementor Site Library
   278. 2.278 SendPulse Free Web Push
   279. 2.279 MAS Elementor
   280. 2.280 Time Clock – A WordPress Employee & Volunteer Time Clock Plugin
   281. 2.281 WP Sessions Time Monitoring Full Automatic
   282. 2.282 Plexx Elementor Extension
   283. 2.283 AADMY – Add Auto Date Month Year Into Posts
   284. 2.284 Rover IDX
   285. 2.285 Rover IDX
   286. 2.286 Da Reactions
   287. 2.287 Point Maker
   288. 2.288 Endless Posts Navigation
   289. 2.289 Miniorange OTP Verification with Firebase
   290. 2.290 Miniorange OTP Verification with Firebase
   291. 2.291 Miniorange OTP Verification with Firebase
   292. 2.292 WP 2FA with Telegram
   293. 2.293 WP 2FA with Telegram
   294. 2.294 WP Education – Education WordPress Plugin for Elementor
   295. 2.295 Debrandify · Remove or Replace WordPress Branding
   296. 2.296 Advanced Custom Fields PRO
   297. 2.297 Cooked Pro
   298. 2.298 Cooked Pro
   299. 2.299 Cooked Pro
   300. 2.300 EventON Pro
   301. 2.301 Nextend Social Login Pro
   302. 2.302 Social Auto Poster
   303. 2.303 Time Clock Pro
   304. 2.304 File Manager Pro
   305. 2.305 File Manager Pro
   306. 2.306 File Manager Pro
3. 3. WordPress Themes — 1 Patched / 5 Unpatched
   1. 3.1 Digitally
   2. 3.2 disconnected
   3. 3.3 js paper
   4. 3.4 my flatonica
   5. 3.5 my wooden under construction
   6. 3.6 Mags

Our WordPress Vulnerability Report covers the latest emerging WordPress plugin, theme, and core vulnerabilities. Each vulnerability will have a severity rating of Low, Medium, High, or Critical. Responsible disclosure of vulnerabilities is essential to keeping the WordPress community safe. Please share this report to help spread the word and make WordPress — and the web — more secure.

WordPress Core

WordPress 6.7 Beta 3 is available and ready for testing! This beta version of the WordPress software is under development. Please do not install, run, or test this version of WordPress on production or mission-critical websites. Instead, it is recommended you evaluate Beta 3 on a test server and site.

For more on this story and to keep up with all updates go to: SOLID WP