Deze week kunnen 160 kwetsbaarheden meer dan 8 miljoen WordPress-sites treffen. Er zijn 68 plugin kwetsbaarheden met beveiligingspatches beschikbaar, dus voer die updates uit als je deze plugins gebruikt! Daarnaast zijn er 92 plugin kwetsbaarheden waarvoor nog geen patch beschikbaar is. Ten minste acht daarvan zijn tot nu toe gesloten en verwijderd uit de wordpress.org plugin directory. Als je ongepatchte plugins of thema’s gebruikt, controleer dan de intenties van hun leveranciers en de voortgang van een beveiligingsrelease. Als er geen patch komt of de kwetsbare plugin of thema is gesloten, moet u overwegen deze te deactiveren en te verwijderen ten gunste van alternatieve oplossingen.

De inhoud van WordPress Vulnerability Report 26 april 2023

1. WordPress Core News
2. WordPress Plugin Vulnerabilities With Patches
   1. Elementor
   2. Autoptimize
   3. Limit Login Attempts
   4. CMP – Coming Soon & Maintenance
   5. Photo Gallery By 10Web
   6. Photo Gallery By 10Web
   7. Blocksy Companion
   8. Essential Blocks
   9. Ninja Tables – Best Data Table Plugin For WordPress
   10. Ninja Tables – Best Data Table Plugin For WordPress
   11. Stream
   12. CMS Tree Page View
   13. TaxoPress
   14. OoohBoi Steroids For Elementor
   15. PowerPress Podcasting Plugin By Blubrry
   16. Visual CSS Style Editor
   17. Jetpack CRM
   18. MiniOrange’s Google Authenticator
   19. Donation Forms By Charitable
   20. Helpie FAQ
   21. Image Optimizer By 10web
   22. Kaya QR Code Generator
   23. Ultimate Addons For Contact Form 7
   24. YML For Yandex Market
   25. WP Original Media Path
   26. LearnPress Export Import
   27. Integration For Contact Form 7 HubSpot
   28. Category Specific RSS Feed Subscription
   29. Captcha Them All
   30. Live Chat By Formilla
   31. Album Gallery – WordPress Gallery
   32. Tablesome
   33. XML For Google Merchant Center
   34. ChatBot
   35. ChatBot
   36. ChatBot
   37. ChatBot
   38. Vimeotheque
   39. WooCommerce Easy Duplicate Product
   40. Thumbnail Carousel Slider
   41. WPJAM Basic
   42. File Gallery
   43. WP-FormAssembly
   44. Robokassa Payment Gateway For Woocommerce
   45. Recipe Maker For Your Food Blog From Zip Recipes
   46. Locatoraid Store Locator
   47. WP Custom Author URL
   48. WP Inventory Manager
   49. BSK Forms Blacklist
   50. Church Admin
   51. Contact Form To DB By BestWebSoft
   52. Contact Form To DB
   53. Extensions For Leaflet Map
   54. Modal Dialog
   55. Query Wrangler
   56. Shortcode To Display Post And User Data
   57. Stock Exporter For WooCommerce
   58. Stock Sync For WooCommerce
   59. Video Grid
   60. WP Docs
   61. Panorama
   62. Formilla Chat And Marketing Automation
   63. Formilla Edge
   64. ChatBot
   65. Form Block
   66. Google Analytics Top Content Widget
   67. Ruby Help Desk
   68. WP Cerber Security
3. WordPress Plugin Vulnerabilities – No Known Fix
   1. Yet Another Related Posts Plugin (YARPP)
   2. Simple Share Buttons Adder
   3. Themify Portfolio Post
   4. GDPR Compliance & Cookie Consent
   5. ShopEngine
   6. Pearl
   7. ReviewX – Multi-Criteria Rating & Reviews For WooCommerce
   8. Simple Tooltips
   9. Smart WooCommerce Search
   10. WP Page Numbers
   11. I Recommend This
   12. Motors
   13. Redirect After Login
   14. SparkPost
   15. White Label Branding For Elementor Page Builder
   16. Arconix Shortcodes
   17. Rating-Widget: Star Review System
   18. BBSpoiler
   19. Mail Subscribe List
   20. SiteAlert
   21. Social Share Boost
   22. FormCraft
   23. WP-DTree
   24. WP Links Page
   25. BadgeOS
   26. Booking Calendar, Appointment Booking System
   27. Email Posts To Subscribers
   28. Layer Slider
   29. Zendesk Support For WordPress
   30. Button Builder – Buttons X
   31. Subscribers
   32. Uji Popup
   33. Update Image Tag Alt Attribute
   34. WCP Contact Form
   35. WP BrowserUpdate
   36. WP BrowserUpdate
   37. ARMember
   38. Progress Bar
   39. PropertyHive
   40. Updraft
   41. Advanced Category Template
   42. Continuous Announcement Scroller
   43. Easy Slider Revolution
   44. Ebook Store
   45. Ebook Store
   46. Gallery Metabox
   47. Simple Giveaways
   48. Inactive User Deleter
   49. Kodex Posts Likes
   50. Verified Reviews (Avis Vérifiés)
   51. Accessibility Suite By Online ADA
   52. Premmerce
   53. The School Management
   54. Shortcode IMDB
   55. Tippy
   56. Video XML Sitemap Generator
   57. Yatra
   58. Semalt Blocker
   59. Woocommerce Products Designer By ORION
   60. ApexChat
   61. ERocket
   62. Flyzoo Chat
   63. Cab Grid
   64. Clock In Portal
   65. Clock In Portal
   66. Clock In Portal
   67. GPS Plotter
   68. Woocommerce Tip/Donation
   69. Dynamically Register Sidebars
   70. Easy Bet
   71. Logo Scheduler
   72. Woocommerce Email Report
   73. Pickup | Delivery | Dine-In Date Time
   74. Advanced Youtube Channel Pagination
   75. HiWeb Migration Simple
   76. UserPlus
   77. Chronosly Events Calendar
   78. Cloud Manager
   79. CRM Memberships
   80. Dave’s WordPress Live Search
   81. Decon WP SMS
   82. Easy Ad Manager
   83. EZP Maintenance Mode
   84. Forms Ada
   85. Login Page Styler
   86. NS Coupon To Become Customer
   87. Reservation.Studio Widget
   88. Sloth Logo Customizer
   89. VSlider Multi Image Slider For WordPress
   90. WP Login Box
   91. ZM Ajax Login & Register
   92. ZM Ajax Login & Register
4. WordPress Theme Vulnerabilities

Lees het rapport van iThemes security voor meer informatie over deze zwaktes.