Deze week kunnen 116 kwetsbaarheden meer dan 6 miljoen WordPress-sites treffen. Er zijn 67 plugin kwetsbaarheden en 2 thema’s met beveiligingspatches beschikbaar, dus voer die updates uit als je deze plugins gebruikt! Daarnaast zijn er 45 kwetsbaarheden in plugins en 2 kwetsbaarheden in thema’s waarvoor nog geen patch beschikbaar is. Ten minste drie daarvan zijn tot nu toe gesloten en verwijderd uit de wordpress.org plugin directory. Als u ongepatchte plugins of thema’s gebruikt, controleer dan de intenties van hun leveranciers en de voortgang van een beveiligingsrelease. Als er geen patch komt of de kwetsbare plugin of thema is gesloten, moet u overwegen deze te deactiveren en te verwijderen ten gunste van alternatieve oplossingen.

De inhoud van WordPress Vulnerability Report 19 april 2023

1. WordPress Core News
2. WordPress Plugin Vulnerabilities With Patches
   1. All In One WP Security & Firewall
   2. WP Fastest Cache
   3. WP Fastest Cache
   4. Limit Login Attempts
   5. Forminator
   6. FluentForm
   7. Shortlinks By Pretty Links
   8. FooGallery
   9. Photo Gallery By 10Web
   10. Photo Gallery By 10Web
   11. Blocksy Companion
   12. Cyr To Lat
   13. Download Manager Pro
   14. Hummingbird
   15. Slimstat Analytics
   16. Easy Forms For MailChimp
   17. Easy Forms For MailChimp
   18. PowerPress Podcasting Plugin By Blubrry
   19. PowerPress
   20. Site Reviews
   21. Quiz And Survey Master
   22. Klaviyo
   23. Redirection
   24. Easy Appointments
   25. Gallery By BestWebSoft
   26. Gallery By BestWebSoft
   27. SupportCandy
   28. WP VR
   29. Better Search
   30. LearnPress Export Import
   31. Product Catalog Feed By PixelYourSite
   32. MyCryptoCheckout
   33. Watu Quiz
   34. Vimeotheque
   35. Ultimate Noindex Nofollow Tool II
   36. WooCommerce Easy Duplicate Product
   37. Thumbnail Carousel Slider
   38. Email Subscription Popup
   39. Woo Bulk Price Update
   40. Coupon Affiliates
   41. Featured Post Creative
   42. Groundhogg
   43. Locatoraid Store Locator
   44. WP Inventory Manager
   45. MDTF
   46. Contact Form To DB By BestWebSoft
   47. Contact Form To DB
   48. Simple Giveaways
   49. Simple Giveaways
   50. ShiftController Employee Shift Scheduling
   51. MC Woocommerce Wishlist
   52. Scheduled Announcements Widget
   53. Photo Gallery By 10Web
   54. A3 Portfolio
   55. Auto Rename Media On Upload
   56. Time Sheets
   57. Zyrex Popup
   58. AI ChatBot
   59. Drag And Drop Multiple File Upload PRO
   60. JetEngine
   61. Responsive WordPress Slideshows
   62. Pricing Tables For WPBakery Page Builder
   63. Pricing Tables For WPBakery Page Builder
   64. Ruby Help Desk
   65. Stylish Cost Calculator Premium
   66. W4 Post List
   67. W4 Post List 
3. WordPress Plugin Vulnerabilities – No Known Fix
   1. Shortcodes By Angie Makes
   2. Custom Order Numbers For WooCommerce
   3. Enable Accessibility
   4. Optima Express + MarketBoost IDX Plugin
   5. ReviewX
   6. CoSchedule
   7. Fantastic Content Protector Free
   8. Affiliate Links Lite
   9. Neshan Maps
   10. Newsletters
   11. WP EasyPay – Square For WordPress
   12. Stamped.io Product Reviews & UGC For WooCommerce
   13. AdFoxly – Ad Manager, AdSense Ads & Ads.txt
   14. Booqable Rental Plugin
   15. Database Collation Fix
   16. Simple PopUp
   17. Landing Page Builder – Free Landing Page Templates
   18. Paytm Payment Donation
   19. WP Roles At Registration
   20. External Videos
   21. Motor Racing League
   22. Pickup | Delivery | Dine-In Date Time
   23. HiWeb Migration Simple
   24. Electric Studio Client Login
   25. UserPlus
   26. AFFILIATE Solution
   27. Amr Ical Events Lists
   28. Article Directory
   29. Article Directory Redux
   30. Cloud Manager
   31. Custom Post Type And Taxonomy GUI Manager
   32. Events Made Easy
   33. InPost Gallery
   34. MS-Reviews
   35. Random Text
   36. Video Central
   37. Waiting: One-Click Countdowns
   38. WP FEvents Book
   39. WP Reroute Email
   40. WP Reroute Email
   41. Steveas WP Live Chat Shoutbox
   42. Steveas WP Live Chat Shoutbox
   43. WP Tiles
   44. WP Tiles
   45. ZM Ajax Login & Register
4. WordPress Theme Vulnerabilities
   1. Square
   2. BeTheme
   3. Educenter
   4. Blogger Buzz

Lees het rapport van iThemes security voor meer informatie over deze zwaktes.