Deze week kunnen 162 kwetsbaarheden meer dan 8 miljoen WordPress-sites treffen. Er zijn 74 plugin kwetsbaarheden met beveiligingspatches beschikbaar, dus voer die updates uit als je deze plugins gebruikt! Daarnaast zijn er 88 plugin kwetsbaarheden waarvoor nog geen patch beschikbaar is. Ten minste negen daarvan zijn tot nu toe gesloten en verwijderd uit de wordpress.org plugin directory. Als je ongepatchte plugins of thema’s gebruikt, controleer dan de intenties van hun leveranciers en de voortgang van een beveiligingsrelease. Als er geen patch komt of de kwetsbare plugin of thema is gesloten, moet u overwegen deze te deactiveren en te verwijderen ten gunste van alternatieve oplossingen.

De inhoud van WordPress Vulnerability Report 3 mei 2023

1. WordPress Plugin Vulnerabilities With Patches
   1. Elementor
   2. Autoptimize
   3. Limit Login Attempts
   4. CMP – Coming Soon & Maintenance
   5. Photo Gallery By 10Web
   6. Photo Gallery By 10Web
   7. Blocksy Companion
   8. Essential Blocks
   9. Ninja Tables – Best Data Table Plugin For WordPress
   10. Ninja Tables – Best Data Table Plugin For WordPress
   11. Stream
   12. CMS Tree Page View
   13. TaxoPress
   14. TaxoPress
   15. TaxoPress
   16. OoohBoi Steroids For Elementor
   17. PowerPress Podcasting Plugin By Blubrry
   18. Visual CSS Style Editor
   19. Jetpack CRM 
   20. MiniOrange’s Google Authenticator
   21. Donation Forms By Charitable
   22. Helpie FAQ
   23. Image Optimizer By 10web
   24. Kaya QR Code Generator
   25. Smart WooCommerce Search
   26. Ultimate Addons For Contact Form 7
   27. YML For Yandex Market
   28. LearnPress Export Import
   29. WP Original Media Path
   30. Integration For Contact Form 7 HubSpot
   31. Captcha Them All
   32. Category Specific RSS Feed Subscription
   33. Live Chat By Formilla
   34. Album Gallery – WordPress Gallery
   35. Tablesome
   36. ChatBot
   37. ChatBot
   38. ChatBot
   39. ChatBot
   40. Vimeotheque
   41. WooCommerce Easy Duplicate Product
   42. WPJAM Basic
   43. XML For Google Merchant Center
   44. File Gallery
   45. WP-FormAssembly
   46. Robokassa Payment Gateway For Woocommerce
   47. WP BrowserUpdate
   48. Thumbnail Carousel Slider
   49. Recipe Maker For Your Food Blog From Zip Recipes
   50. Locatoraid Store Locator
   51. WP Custom Author URL
   52. WP Inventory Manager
   53. BSK Forms Blacklist
   54. Church Admin
   55. Contact Form To DB By BestWebSoft
   56. Contact Form To DB
   57. Ebook Store
   58. Ebook Store
   59. Extensions For Leaflet Map
   60. Modal Dialog
   61. Query Wrangler
   62. Shortcode To Display Post And User Data
   63. Stock Exporter For WooCommerce
   64. Stock Sync For WooCommerce
   65. Video Grid
   66. WP Docs
   67. Panorama
   68. Formilla Chat And Marketing Automation
   69. Formilla Edge
   70. ChatBot
   71. Form Block
   72. Google Analytics Top Content Widget
   73. Ruby Help Desk
   74. WP Cerber Security
2. WordPress Plugin Vulnerabilities – No Known Fix
   1. Yet Another Related Posts Plugin (YARPP)
   2. Simple Share Buttons Adder
   3. Themify Portfolio Post
   4. GDPR Compliance & Cookie Consent
   5. ShopEngine
   6. Pearl
   7. ReviewX – Multi-Criteria Rating & Reviews For WooCommerce
   8. Simple Tooltips
   9. WP Page Numbers
   10. I Recommend This
   11. Motors
   12. Redirect After Login
   13. SparkPost
   14. White Label Branding For Elementor Page Builder
   15. Arconix Shortcodes
   16. Rating-Widget: Star Review System
   17. BBSpoiler
   18. Mail Subscribe List
   19. SiteAlert
   20. Social Share Boost
   21. FormCraft
   22. WP-DTree
   23. WP Links Page
   24. BadgeOS
   25. Booking Calendar, Appointment Booking System
   26. Email Posts To Subscribers
   27. Layer Slider
   28. Zendesk Support For WordPress
   29. Button Builder – Buttons X
   30. Subscribers
   31. Uji Popup
   32. WCP Contact Form
   33. WP BrowserUpdate
   34. ARMember
   35. Progress Bar
   36. PropertyHive
   37. Update Image Tag Alt Attribute
   38. Updraft
   39. Advanced Category Template
   40. Continuous Announcement Scroller
   41. Easy Slider Revolution
   42. Gallery Metabox
   43. Simple Giveaways
   44. Inactive User Deleter
   45. Kodex Posts Likes
   46. Verified Reviews (Avis Vérifiés)
   47. Accessibility Suite By Online ADA 
   48. Premmerce
   49. The School Management
   50. Shortcode IMDB
   51. Tippy
   52. Video XML Sitemap Generator
   53. Yatra
   54. Semalt Blocker
   55. Woocommerce Products Designer By ORION
   56. ApexChat
   57. ERocket
   58. Flyzoo Chat
   59. Cab Grid 
   60. Clock In Portal
   61. Clock In Portal
   62. Clock In Portal
   63. GPS Plotter
   64. Woocommerce Tip/Donation
   65. Dynamically Register Sidebars
   66. Easy Bet
   67. Logo Scheduler
   68. Woocommerce Email Report
   69. Pickup | Delivery | Dine-In Date Time
   70. Advanced Youtube Channel Pagination
   71. HiWeb Migration Simple
   72. UserPlus
   73. Chronosly Events Calendar
   74. Cloud Manager
   75. CRM Memberships
   76. Dave’s WordPress Live Search
   77. Decon WP SMS
   78. Easy Ad Manager
   79. EZP Maintenance Mode
   80. Forms Ada
   81. Login Page Styler
   82. NS Coupon To Become Customer
   83. Reservation.Studio Widget
   84. Sloth Logo Customizer
   85. VSlider Multi Image Slider For WordPress
   86. WP Login Box
   87. ZM Ajax Login & Register
   88. ZM Ajax Login & Register
3. WordPress Theme Vulnerabilities

Lees het rapport van iThemes security voor meer informatie over deze zwaktes.