Action not permitted
Modal body text goes here.
Modal Title
Modal Body
Title
WordPress插件AccessPress Themes存在未明漏洞
Description
WordPress是Wordpress基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。
WordPress插件AccessPress Themes存在安全漏洞，该漏洞源于插件和主题的供应商网站存在后门。通过供应商网站下载的插件和主题会受到影响。目前没有详细的漏洞细节提供。
Severity
高
Patch Name
WordPress插件AccessPress Themes存在未明漏洞的补丁
Patch Description
WordPress是Wordpress基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。
WordPress插件AccessPress Themes存在安全漏洞，该漏洞源于插件和主题的供应商网站存在后门。通过供应商网站下载的插件和主题会受到影响。目前没有详细的漏洞细节提供。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description
目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://wpscan.com/vulnerability/9c76bada-fa32-4c2f-9855-d0efd1e63eff
Reference
https://nvd.nist.gov/vuln/detail/CVE-2021-24867
Impacted products
| Name | WordPress AccessPress Themes |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2021-24867"
}
},
"description": "WordPress\u662fWordpress\u57fa\u91d1\u4f1a\u7684\u4e00\u5957\u4f7f\u7528PHP\u8bed\u8a00\u5f00\u53d1\u7684\u535a\u5ba2\u5e73\u53f0\u3002\u8be5\u5e73\u53f0\u652f\u6301\u5728PHP\u548cMySQL\u7684\u670d\u52a1\u5668\u4e0a\u67b6\u8bbe\u4e2a\u4eba\u535a\u5ba2\u7f51\u7ad9\u3002\n\nWordPress\u63d2\u4ef6AccessPress Themes\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u63d2\u4ef6\u548c\u4e3b\u9898\u7684\u4f9b\u5e94\u5546\u7f51\u7ad9\u5b58\u5728\u540e\u95e8\u3002\u901a\u8fc7\u4f9b\u5e94\u5546\u7f51\u7ad9\u4e0b\u8f7d\u7684\u63d2\u4ef6\u548c\u4e3b\u9898\u4f1a\u53d7\u5230\u5f71\u54cd\u3002\u76ee\u524d\u6ca1\u6709\u8be6\u7ec6\u7684\u6f0f\u6d1e\u7ec6\u8282\u63d0\u4f9b\u3002",
"formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://wpscan.com/vulnerability/9c76bada-fa32-4c2f-9855-d0efd1e63eff",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2022-28470",
"openTime": "2022-04-13",
"patchDescription": "WordPress\u662fWordpress\u57fa\u91d1\u4f1a\u7684\u4e00\u5957\u4f7f\u7528PHP\u8bed\u8a00\u5f00\u53d1\u7684\u535a\u5ba2\u5e73\u53f0\u3002\u8be5\u5e73\u53f0\u652f\u6301\u5728PHP\u548cMySQL\u7684\u670d\u52a1\u5668\u4e0a\u67b6\u8bbe\u4e2a\u4eba\u535a\u5ba2\u7f51\u7ad9\u3002\r\n\r\nWordPress\u63d2\u4ef6AccessPress Themes\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u63d2\u4ef6\u548c\u4e3b\u9898\u7684\u4f9b\u5e94\u5546\u7f51\u7ad9\u5b58\u5728\u540e\u95e8\u3002\u901a\u8fc7\u4f9b\u5e94\u5546\u7f51\u7ad9\u4e0b\u8f7d\u7684\u63d2\u4ef6\u548c\u4e3b\u9898\u4f1a\u53d7\u5230\u5f71\u54cd\u3002\u76ee\u524d\u6ca1\u6709\u8be6\u7ec6\u7684\u6f0f\u6d1e\u7ec6\u8282\u63d0\u4f9b\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "WordPress\u63d2\u4ef6AccessPress Themes\u5b58\u5728\u672a\u660e\u6f0f\u6d1e\u7684\u8865\u4e01",
"products": {
"product": "WordPress AccessPress Themes"
},
"referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2021-24867",
"serverity": "\u9ad8",
"submitTime": "2022-02-23",
"title": "WordPress\u63d2\u4ef6AccessPress Themes\u5b58\u5728\u672a\u660e\u6f0f\u6d1e"
}
CVE-2021-24867 (GCVE-0-2021-24867)
Vulnerability from cvelistv5 – Published: 2022-02-21 10:45 – Updated: 2024-08-03 19:49
VLAI
EPSS
VEX
Title
Backdoored Plugins & Themes from AccessPress Themes
Summary
Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusion
Severity
No CVSS data available.
CWE
- CWE-912 - Hidden Functionality
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://wpscan.com/vulnerability/9c76bada-fa32-4c… | x_refsource_MISC |
| https://jetpack.com/2022/01/18/backdoor-found-in-… | x_refsource_MISC |
Impacted products
93 products
Credits
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T19:49:13.412Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://wpscan.com/vulnerability/9c76bada-fa32-4c2f-9855-d0efd1e63eff"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://jetpack.com/2022/01/18/backdoor-found-in-themes-and-plugins-from-accesspress-themes/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Frontend Post WordPress Plugin \u2013 AccessPress Anonymous Post",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "2.8.0*",
"status": "affected",
"version": "2.8.0",
"versionType": "custom"
},
{
"lessThan": "2.8.1",
"status": "affected",
"version": "2.8.1",
"versionType": "custom"
}
]
},
{
"product": "AccessPress Custom CSS",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "2.0.1*",
"status": "affected",
"version": "2.0.1",
"versionType": "custom"
},
{
"lessThan": "2.0.2",
"status": "affected",
"version": "2.0.2",
"versionType": "custom"
}
]
},
{
"product": "AccessPress Custom Post Type",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "1.0.8*",
"status": "affected",
"version": "1.0.8",
"versionType": "custom"
},
{
"lessThan": "1.0.9",
"status": "affected",
"version": "1.0.9",
"versionType": "custom"
}
]
},
{
"product": "Social Auto Poster",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "2.1.3*",
"status": "affected",
"version": "2.1.3",
"versionType": "custom"
},
{
"lessThan": "2.1.4",
"status": "affected",
"version": "2.1.4",
"versionType": "custom"
}
]
},
{
"product": "AccessPress iFeeds",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "4.0.3*",
"status": "affected",
"version": "4.0.3",
"versionType": "custom"
},
{
"lessThan": "4.0.4",
"status": "affected",
"version": "4.0.4",
"versionType": "custom"
}
]
},
{
"product": "PI Button",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "3.3.3*",
"status": "affected",
"version": "3.3.3",
"versionType": "custom"
},
{
"lessThan": "3.3.4",
"status": "affected",
"version": "3.3.4",
"versionType": "custom"
}
]
},
{
"product": "AccessPress Social Counter",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "1.9.1*",
"status": "affected",
"version": "1.9.1",
"versionType": "custom"
},
{
"lessThan": "1.9.2",
"status": "affected",
"version": "1.9.2",
"versionType": "custom"
}
]
},
{
"product": "AccessPress Social Icons",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "1.8.2*",
"status": "affected",
"version": "1.8.2",
"versionType": "custom"
},
{
"lessThan": "1.8.3",
"status": "affected",
"version": "1.8.3",
"versionType": "custom"
}
]
},
{
"product": "AccessPress Social Login Lite \u2013 Social Login WordPress Plugin",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "3.4.7*",
"status": "affected",
"version": "3.4.7",
"versionType": "custom"
},
{
"lessThan": "3.4.8",
"status": "affected",
"version": "3.4.8",
"versionType": "custom"
}
]
},
{
"product": "AccessPress Social Share",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "4.5.5*",
"status": "affected",
"version": "4.5.5",
"versionType": "custom"
},
{
"lessThan": "4.5.6",
"status": "affected",
"version": "4.5.6",
"versionType": "custom"
}
]
},
{
"product": "TAuto Poster",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "1.4.5*",
"status": "affected",
"version": "1.4.5",
"versionType": "custom"
},
{
"lessThan": "1.4.6",
"status": "affected",
"version": "1.4.6",
"versionType": "custom"
}
]
},
{
"product": "WP TFeed",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "1.6.7*",
"status": "affected",
"version": "1.6.7",
"versionType": "custom"
},
{
"lessThan": "1.6.8",
"status": "affected",
"version": "1.6.8",
"versionType": "custom"
}
]
},
{
"product": "Effectively Add \u0026 Customize Free Icons For WordPress Menus \u2013 WP Menu Icons Lite",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "1.0.9",
"status": "affected",
"version": "1.0.9",
"versionType": "custom"
}
]
},
{
"product": "AP Companion",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "1.0.7",
"status": "affected",
"version": "1.0.7",
"versionType": "custom"
}
]
},
{
"product": "Easiest Contact Form for WordPress \u2013 AP Contact Form",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "1.0.6*",
"status": "affected",
"version": "1.0.6",
"versionType": "custom"
},
{
"lessThan": "1.0.7",
"status": "affected",
"version": "1.0.7",
"versionType": "custom"
}
]
},
{
"product": "Testimonial WordPress Plugin \u2013 AP Custom Testimonial",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "1.4.6*",
"status": "affected",
"version": "1.4.6",
"versionType": "custom"
},
{
"lessThan": "1.4.7",
"status": "affected",
"version": "1.4.7",
"versionType": "custom"
}
]
},
{
"product": "Mega Menu Plugin for WordPress \u2013 AP Mega Menu",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "3.0.5*",
"status": "affected",
"version": "3.0.5",
"versionType": "custom"
},
{
"lessThan": "3.0.6",
"status": "affected",
"version": "3.0.6",
"versionType": "custom"
}
]
},
{
"product": "Pricing Table Builder \u2013 AP Pricing Tables Lite",
"vendor": "AccessPress Themes",
"versions": [
{
"changes": [
{
"at": "1.1.3",
"status": "unaffected"
}
],
"lessThan": "1.1.3*",
"status": "affected",
"version": "1.1.3",
"versionType": "custom"
}
]
},
{
"product": "Responsive Notification Bar Plugin for WordPress \u2013 Apex Notification Bar Lite",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "2.0.4*",
"status": "affected",
"version": "2.0.4",
"versionType": "custom"
},
{
"lessThan": "2.0.5",
"status": "affected",
"version": "2.0.5",
"versionType": "custom"
}
]
},
{
"product": "Form Store to DB",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "1.0.9*",
"status": "affected",
"version": "1.0.9",
"versionType": "custom"
},
{
"lessThan": "1.1.0",
"status": "affected",
"version": "1.1.0",
"versionType": "custom"
}
]
},
{
"product": "Comments Disable \u2013 AccessPress",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "1.0.7*",
"status": "affected",
"version": "1.0.7",
"versionType": "custom"
},
{
"lessThan": "1.0.8",
"status": "affected",
"version": "1.0.8",
"versionType": "custom"
}
]
},
{
"product": "CTA plugin for WordPress \u2013 Easy Side Tab",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "1.0.7*",
"status": "affected",
"version": "1.0.7",
"versionType": "custom"
},
{
"lessThan": "1.0.8",
"status": "affected",
"version": "1.0.8",
"versionType": "custom"
}
]
},
{
"product": "WordPress Backend Customizer \u2013 Everest Admin Theme Lite",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "1.0.7*",
"status": "affected",
"version": "1.0.7",
"versionType": "custom"
},
{
"lessThan": "1.0.8",
"status": "affected",
"version": "1.0.8",
"versionType": "custom"
}
]
},
{
"product": "Ultimate Coming Soon, Maintenance Mode Plugin for WordPress \u2013 Everest Coming Soon Lite",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "1.1.0*",
"status": "affected",
"version": "1.1.0",
"versionType": "custom"
},
{
"lessThan": "1.1.1",
"status": "affected",
"version": "1.1.1",
"versionType": "custom"
}
]
},
{
"product": "Free WordPress Plugin To Display Like/Dislike Comment Rating \u2013 Everest Comment Rating Lite",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "2.0.4*",
"status": "affected",
"version": "2.0.4",
"versionType": "custom"
},
{
"lessThan": "2.0.5",
"status": "affected",
"version": "2.0.5",
"versionType": "custom"
}
]
},
{
"product": "Beautiful Stat Counter Plugin for WordPress \u2013 Everest Counter Lite",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "2.0.7*",
"status": "affected",
"version": "2.0.7",
"versionType": "custom"
},
{
"lessThan": "2.0.8",
"status": "affected",
"version": "2.0.8",
"versionType": "custom"
}
]
},
{
"product": "Beautiful FAQ Plugin for WordPress \u2013 Everest FAQ Manager Lite",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "1.0.8*",
"status": "affected",
"version": "1.0.8",
"versionType": "custom"
},
{
"lessThan": "1.0.9",
"status": "affected",
"version": "1.0.9",
"versionType": "custom"
}
]
},
{
"product": "Responsive Media Gallery Plugin for WordPress \u2013 Everest Gallery Lite",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "1.0.8*",
"status": "affected",
"version": "1.0.8",
"versionType": "custom"
},
{
"lessThan": "1.0.9",
"status": "affected",
"version": "1.0.9",
"versionType": "custom"
}
]
},
{
"product": "Everest GPlaces Business Reviews",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "1.0.9*",
"status": "affected",
"version": "1.0.9",
"versionType": "custom"
},
{
"lessThan": "2.0.0",
"status": "affected",
"version": "2.0.0",
"versionType": "custom"
}
]
},
{
"product": "Everest Review Lite \u2013 User/Admin review plugin for WordPress",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "1.0.7"
}
]
},
{
"product": "Free Responsive Tab Plugin For WordPress \u2013 Everest Tab Lite",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "2.0.3*",
"status": "affected",
"version": "2.0.3",
"versionType": "custom"
},
{
"lessThan": "2.0.4",
"status": "affected",
"version": "2.0.4",
"versionType": "custom"
}
]
},
{
"product": "Responsive WordPress Timeline Plugin \u2013 Everest Timeline Lite",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "1.1.1*",
"status": "affected",
"version": "1.1.1",
"versionType": "custom"
},
{
"lessThan": "1.1.2",
"status": "affected",
"version": "1.1.2",
"versionType": "custom"
}
]
},
{
"product": "Inline Call To Action Builder Lite \u2013 Free Call To Action Layer Plugin for WordPress",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "1.1.0*",
"status": "affected",
"version": "1.1.0",
"versionType": "custom"
},
{
"lessThan": "1.1.1",
"status": "affected",
"version": "1.1.1",
"versionType": "custom"
}
]
},
{
"product": "Product Slider For WooCommerce Lite",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "1.1.5*",
"status": "affected",
"version": "1.1.5",
"versionType": "custom"
},
{
"lessThan": "1.1.6",
"status": "affected",
"version": "1.1.6",
"versionType": "custom"
}
]
},
{
"product": "Responsive Clients Logo Gallery Plugin for WordPress \u2013 Smart Logo Showcase Lite",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "1.1.7*",
"status": "affected",
"version": "1.1.7",
"versionType": "custom"
},
{
"lessThan": "1.1.8",
"status": "affected",
"version": "1.1.8",
"versionType": "custom"
}
]
},
{
"product": "Smart Scroll Posts for WordPress",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "2.0.8*",
"status": "affected",
"version": "2.0.8",
"versionType": "custom"
},
{
"lessThan": "2.0.9",
"status": "affected",
"version": "2.0.9",
"versionType": "custom"
}
]
},
{
"product": "Faster and Easier scroll to Top Plugin for WordPress \u2013 Smart Scroll to Top Lite",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "1.0.3*",
"status": "affected",
"version": "1.0.3",
"versionType": "custom"
},
{
"lessThan": "1.0.4",
"status": "affected",
"version": "1.0.4",
"versionType": "custom"
}
]
},
{
"product": "Total GDPR Compliance Lite \u2013 WordPress Plugin for GDPR Compatibility",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "1.0.4"
}
]
},
{
"product": "Total Team Lite \u2013 Responsive Team Manager / Showcase Plugin for WordPress",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "1.1.1*",
"status": "affected",
"version": "1.1.1",
"versionType": "custom"
},
{
"lessThan": "1.1.2",
"status": "affected",
"version": "1.1.2",
"versionType": "custom"
}
]
},
{
"product": "Free Responsive Post/Article Author Section Plugin for WordPress \u2013 Ultimate Author Box Lite",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "1.1.2*",
"status": "affected",
"version": "1.1.2",
"versionType": "custom"
},
{
"lessThan": "1.1.3",
"status": "affected",
"version": "1.1.3",
"versionType": "custom"
}
]
},
{
"product": "Contact Form for WordPress \u2013 Ultimate Form Builder Lite",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "1.5.0*",
"status": "affected",
"version": "1.5.0",
"versionType": "custom"
},
{
"lessThan": "1.5.1",
"status": "affected",
"version": "1.5.1",
"versionType": "custom"
}
]
},
{
"product": "Badge Designer Lite For WooCommerce",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "1.1.0*",
"status": "affected",
"version": "1.1.0",
"versionType": "custom"
},
{
"lessThan": "1.1.1",
"status": "affected",
"version": "1.1.1",
"versionType": "custom"
}
]
},
{
"product": "WordPress Slider Plugin \u2013 WP 1 Slider",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "1.2.9*",
"status": "affected",
"version": "1.2.9",
"versionType": "custom"
},
{
"lessThan": "1.3.0",
"status": "affected",
"version": "1.3.0",
"versionType": "custom"
}
]
},
{
"product": "Plugin to Manage / Design WordPress Blog \u2013 WP Blog Manager Lite",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "1.1.1*",
"status": "affected",
"version": "1.1.1",
"versionType": "custom"
},
{
"lessThan": "1.1.2",
"status": "affected",
"version": "1.1.2",
"versionType": "custom"
}
]
},
{
"product": "Smartest Way To Design \u0026 Customize WordPress Comments \u0026 Comment Form \u2013 WP Comment Designer Lite",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "2.0.3*",
"status": "affected",
"version": "2.0.3",
"versionType": "custom"
},
{
"lessThan": "2.0.4",
"status": "affected",
"version": "2.0.4",
"versionType": "custom"
}
]
},
{
"product": "Cookie Notification Plugin for WordPress \u2013 WP Cookie User Info",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "1.0.7*",
"status": "affected",
"version": "1.0.7",
"versionType": "custom"
},
{
"lessThan": "1.0.8",
"status": "affected",
"version": "1.0.8",
"versionType": "custom"
}
]
},
{
"product": "Social Review",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "1.0.9",
"status": "affected",
"version": "1.0.9",
"versionType": "custom"
}
]
},
{
"product": "MContact Button",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "2.0.7",
"status": "affected",
"version": "2.0.7",
"versionType": "custom"
}
]
},
{
"product": "WP Floating Menu \u2013 One page navigator, sticky menu for WordPress",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "1.4.4*",
"status": "affected",
"version": "1.4.4",
"versionType": "custom"
},
{
"lessThan": "1.4.5",
"status": "affected",
"version": "1.4.5",
"versionType": "custom"
}
]
},
{
"product": "The Easiest WordPress Media Manager Plugin \u2013 WP Media Manager Lite",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "1.1.2*",
"status": "affected",
"version": "1.1.2",
"versionType": "custom"
},
{
"lessThan": "1.1.3",
"status": "affected",
"version": "1.1.3",
"versionType": "custom"
}
]
},
{
"product": "WP Popup Banners",
"vendor": "AccessPress Themes",
"versions": [
{
"lessThan": "1.2.3*",
"status": "affected",
"version": "1.2.3",
"versionType": "custom"
},
{
"lessThan": "1.2.4",
"status": "affected",
"version": "1.2.4",
"versionType": "custom"
}
]
},
{
"product": "WP Popup Lite \u2013 Responsive popup plugin for WordPress",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "1.0.8"
}
]
},
{
"product": "Responsive Products Showcase Listing for WordPress \u2013 WP Product Gallery Lite",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "1.1.1"
}
]
},
{
"product": "accessbuddy",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "1.0.0"
}
]
},
{
"product": "Accesspress Basic",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "3.2.1"
}
]
},
{
"product": "Accesspress Lite",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "2.92"
}
]
},
{
"product": "Accesspress Mag",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "2.6.5"
}
]
},
{
"product": "AccessPress Parallax",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "4.5"
}
]
},
{
"product": "accesspress-ray",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "1.19.5"
}
]
},
{
"product": "AccessPress Root",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "2.5"
}
]
},
{
"product": "AccessPress Staple",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "1.9.1"
}
]
},
{
"product": "AccessPress Store",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "2.4.9"
}
]
},
{
"product": "Agency Lite",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "1.1.6"
}
]
},
{
"product": "Aplite",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "1.0.6"
}
]
},
{
"product": "Bingle",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "1.0.4"
}
]
},
{
"product": "Bloger",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "1.2.6"
}
]
},
{
"product": "Construction Lite",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "1.2.5"
}
]
},
{
"product": "Doko",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "1.0.27"
}
]
},
{
"product": "Enlighten",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "1.3.5"
}
]
},
{
"product": "FashStore",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "1.2.1"
}
]
},
{
"product": "FotoGraphy",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "2.4.0"
}
]
},
{
"product": "Gaga Corp",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "1.0.8"
}
]
},
{
"product": "Gaga Lite",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "1.4.2 1.0.8"
}
]
},
{
"product": "One Paze",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "2.2.8"
}
]
},
{
"product": "parallax-blog",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "3.1.1574941215"
}
]
},
{
"product": "ParallaxSome",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "1.3.6"
}
]
},
{
"product": "Punte",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "1.1.2"
}
]
},
{
"product": "Revolve",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "1.3.1"
}
]
},
{
"product": "Ripple",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "1.2.0"
}
]
},
{
"product": "ScrollMe",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "2.1.0"
}
]
},
{
"product": "SportsMag",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "1.2.1"
}
]
},
{
"product": "StoreVilla",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "1.4.1"
}
]
},
{
"product": "Swing Lite",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "1.1.9"
}
]
},
{
"product": "The Launcher",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "1.3.2"
}
]
},
{
"product": "The Monday",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "1.4.1"
}
]
},
{
"product": "Uncode Lite",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "1.3.1"
}
]
},
{
"product": "Unicon Lite",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "1.2.6"
}
]
},
{
"product": "VMag",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "1.2.7"
}
]
},
{
"product": "VMagazine Lite",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "1.3.5"
}
]
},
{
"product": "Vmagazine News",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "1.0.5"
}
]
},
{
"product": "Zigcy Baby",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "1.0.6"
}
]
},
{
"product": "Zigcy Cosmetics",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "1.0.5"
}
]
},
{
"product": "Zigcy Lite",
"vendor": "AccessPress Themes",
"versions": [
{
"status": "affected",
"version": "2.0.9"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "Harald Eilertsen (Jetpack Scan)"
}
],
"descriptions": [
{
"lang": "en",
"value": "Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusion"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-912",
"description": "CWE-912 Hidden Functionality",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2022-02-21T10:45:39.000Z",
"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"shortName": "WPScan"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://wpscan.com/vulnerability/9c76bada-fa32-4c2f-9855-d0efd1e63eff"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://jetpack.com/2022/01/18/backdoor-found-in-themes-and-plugins-from-accesspress-themes/"
}
],
"source": {
"discovery": "EXTERNAL"
},
"title": "Backdoored Plugins \u0026 Themes from AccessPress Themes",
"x_generator": "WPScan CVE Generator",
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "contact@wpscan.com",
"ID": "CVE-2021-24867",
"STATE": "PUBLIC",
"TITLE": "Backdoored Plugins \u0026 Themes from AccessPress Themes"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Frontend Post WordPress Plugin \u2013 AccessPress Anonymous Post",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "2.8.0",
"version_value": "2.8.0"
},
{
"version_affected": "\u003c",
"version_name": "2.8.1",
"version_value": "2.8.1"
}
]
}
},
{
"product_name": "AccessPress Custom CSS",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "2.0.1",
"version_value": "2.0.1"
},
{
"version_affected": "\u003c",
"version_name": "2.0.2",
"version_value": "2.0.2"
}
]
}
},
{
"product_name": "AccessPress Custom Post Type",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "1.0.8",
"version_value": "1.0.8"
},
{
"version_affected": "\u003c",
"version_name": "1.0.9",
"version_value": "1.0.9"
}
]
}
},
{
"product_name": "Social Auto Poster",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "2.1.3",
"version_value": "2.1.3"
},
{
"version_affected": "\u003c",
"version_name": "2.1.4",
"version_value": "2.1.4"
}
]
}
},
{
"product_name": "AccessPress iFeeds",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "4.0.3",
"version_value": "4.0.3"
},
{
"version_affected": "\u003c",
"version_name": "4.0.4",
"version_value": "4.0.4"
}
]
}
},
{
"product_name": "PI Button",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "3.3.3",
"version_value": "3.3.3"
},
{
"version_affected": "\u003c",
"version_name": "3.3.4",
"version_value": "3.3.4"
}
]
}
},
{
"product_name": "AccessPress Social Counter",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "1.9.1",
"version_value": "1.9.1"
},
{
"version_affected": "\u003c",
"version_name": "1.9.2",
"version_value": "1.9.2"
}
]
}
},
{
"product_name": "AccessPress Social Icons",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "1.8.2",
"version_value": "1.8.2"
},
{
"version_affected": "\u003c",
"version_name": "1.8.3",
"version_value": "1.8.3"
}
]
}
},
{
"product_name": "AccessPress Social Login Lite \u2013 Social Login WordPress Plugin",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "3.4.7",
"version_value": "3.4.7"
},
{
"version_affected": "\u003c",
"version_name": "3.4.8",
"version_value": "3.4.8"
}
]
}
},
{
"product_name": "AccessPress Social Share",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "4.5.5",
"version_value": "4.5.5"
},
{
"version_affected": "\u003c",
"version_name": "4.5.6",
"version_value": "4.5.6"
}
]
}
},
{
"product_name": "TAuto Poster",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "1.4.5",
"version_value": "1.4.5"
},
{
"version_affected": "\u003c",
"version_name": "1.4.6",
"version_value": "1.4.6"
}
]
}
},
{
"product_name": "WP TFeed",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "1.6.7",
"version_value": "1.6.7"
},
{
"version_affected": "\u003c",
"version_name": "1.6.8",
"version_value": "1.6.8"
}
]
}
},
{
"product_name": "Effectively Add \u0026 Customize Free Icons For WordPress Menus \u2013 WP Menu Icons Lite",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "1.0.9",
"version_value": "1.0.9"
}
]
}
},
{
"product_name": "AP Companion",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "1.0.7",
"version_value": "1.0.7"
}
]
}
},
{
"product_name": "Easiest Contact Form for WordPress \u2013 AP Contact Form",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "1.0.6",
"version_value": "1.0.6"
},
{
"version_affected": "\u003c",
"version_name": "1.0.7",
"version_value": "1.0.7"
}
]
}
},
{
"product_name": "Testimonial WordPress Plugin \u2013 AP Custom Testimonial",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "1.4.6",
"version_value": "1.4.6"
},
{
"version_affected": "\u003c",
"version_name": "1.4.7",
"version_value": "1.4.7"
}
]
}
},
{
"product_name": "Mega Menu Plugin for WordPress \u2013 AP Mega Menu",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "3.0.5",
"version_value": "3.0.5"
},
{
"version_affected": "\u003c",
"version_name": "3.0.6",
"version_value": "3.0.6"
}
]
}
},
{
"product_name": "Pricing Table Builder \u2013 AP Pricing Tables Lite",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "1.1.3",
"version_value": "1.1.3"
},
{
"version_affected": "\u003c",
"version_name": "1.1.3",
"version_value": "1.1.3"
}
]
}
},
{
"product_name": "Responsive Notification Bar Plugin for WordPress \u2013 Apex Notification Bar Lite",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "2.0.4",
"version_value": "2.0.4"
},
{
"version_affected": "\u003c",
"version_name": "2.0.5",
"version_value": "2.0.5"
}
]
}
},
{
"product_name": "Form Store to DB",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "1.0.9",
"version_value": "1.0.9"
},
{
"version_affected": "\u003c",
"version_name": "1.1.0",
"version_value": "1.1.0"
}
]
}
},
{
"product_name": "Comments Disable \u2013 AccessPress",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "1.0.7",
"version_value": "1.0.7"
},
{
"version_affected": "\u003c",
"version_name": "1.0.8",
"version_value": "1.0.8"
}
]
}
},
{
"product_name": "CTA plugin for WordPress \u2013 Easy Side Tab",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "1.0.7",
"version_value": "1.0.7"
},
{
"version_affected": "\u003c",
"version_name": "1.0.8",
"version_value": "1.0.8"
}
]
}
},
{
"product_name": "WordPress Backend Customizer \u2013 Everest Admin Theme Lite",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "1.0.7",
"version_value": "1.0.7"
},
{
"version_affected": "\u003c",
"version_name": "1.0.8",
"version_value": "1.0.8"
}
]
}
},
{
"product_name": "Ultimate Coming Soon, Maintenance Mode Plugin for WordPress \u2013 Everest Coming Soon Lite",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "1.1.0",
"version_value": "1.1.0"
},
{
"version_affected": "\u003c",
"version_name": "1.1.1",
"version_value": "1.1.1"
}
]
}
},
{
"product_name": "Free WordPress Plugin To Display Like/Dislike Comment Rating \u2013 Everest Comment Rating Lite",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "2.0.4",
"version_value": "2.0.4"
},
{
"version_affected": "\u003c",
"version_name": "2.0.5",
"version_value": "2.0.5"
}
]
}
},
{
"product_name": "Beautiful Stat Counter Plugin for WordPress \u2013 Everest Counter Lite",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "2.0.7",
"version_value": "2.0.7"
},
{
"version_affected": "\u003c",
"version_name": "2.0.8",
"version_value": "2.0.8"
}
]
}
},
{
"product_name": "Beautiful FAQ Plugin for WordPress \u2013 Everest FAQ Manager Lite",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "1.0.8",
"version_value": "1.0.8"
},
{
"version_affected": "\u003c",
"version_name": "1.0.9",
"version_value": "1.0.9"
}
]
}
},
{
"product_name": "Responsive Media Gallery Plugin for WordPress \u2013 Everest Gallery Lite",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "1.0.8",
"version_value": "1.0.8"
},
{
"version_affected": "\u003c",
"version_name": "1.0.9",
"version_value": "1.0.9"
}
]
}
},
{
"product_name": "Everest GPlaces Business Reviews",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "1.0.9",
"version_value": "1.0.9"
},
{
"version_affected": "\u003c",
"version_name": "2.0.0",
"version_value": "2.0.0"
}
]
}
},
{
"product_name": "Everest Review Lite \u2013 User/Admin review plugin for WordPress",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "1.0.7",
"version_value": "1.0.7"
}
]
}
},
{
"product_name": "Free Responsive Tab Plugin For WordPress \u2013 Everest Tab Lite",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "2.0.3",
"version_value": "2.0.3"
},
{
"version_affected": "\u003c",
"version_name": "2.0.4",
"version_value": "2.0.4"
}
]
}
},
{
"product_name": "Responsive WordPress Timeline Plugin \u2013 Everest Timeline Lite",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "1.1.1",
"version_value": "1.1.1"
},
{
"version_affected": "\u003c",
"version_name": "1.1.2",
"version_value": "1.1.2"
}
]
}
},
{
"product_name": "Inline Call To Action Builder Lite \u2013 Free Call To Action Layer Plugin for WordPress",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "1.1.0",
"version_value": "1.1.0"
},
{
"version_affected": "\u003c",
"version_name": "1.1.1",
"version_value": "1.1.1"
}
]
}
},
{
"product_name": "Product Slider For WooCommerce Lite",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "1.1.5",
"version_value": "1.1.5"
},
{
"version_affected": "\u003c",
"version_name": "1.1.6",
"version_value": "1.1.6"
}
]
}
},
{
"product_name": "Responsive Clients Logo Gallery Plugin for WordPress \u2013 Smart Logo Showcase Lite",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "1.1.7",
"version_value": "1.1.7"
},
{
"version_affected": "\u003c",
"version_name": "1.1.8",
"version_value": "1.1.8"
}
]
}
},
{
"product_name": "Smart Scroll Posts for WordPress",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "2.0.8",
"version_value": "2.0.8"
},
{
"version_affected": "\u003c",
"version_name": "2.0.9",
"version_value": "2.0.9"
}
]
}
},
{
"product_name": "Faster and Easier scroll to Top Plugin for WordPress \u2013 Smart Scroll to Top Lite",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "1.0.3",
"version_value": "1.0.3"
},
{
"version_affected": "\u003c",
"version_name": "1.0.4",
"version_value": "1.0.4"
}
]
}
},
{
"product_name": "Total GDPR Compliance Lite \u2013 WordPress Plugin for GDPR Compatibility",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "1.0.4",
"version_value": "1.0.4"
}
]
}
},
{
"product_name": "Total Team Lite \u2013 Responsive Team Manager / Showcase Plugin for WordPress",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "1.1.1",
"version_value": "1.1.1"
},
{
"version_affected": "\u003c",
"version_name": "1.1.2",
"version_value": "1.1.2"
}
]
}
},
{
"product_name": "Free Responsive Post/Article Author Section Plugin for WordPress \u2013 Ultimate Author Box Lite",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "1.1.2",
"version_value": "1.1.2"
},
{
"version_affected": "\u003c",
"version_name": "1.1.3",
"version_value": "1.1.3"
}
]
}
},
{
"product_name": "Contact Form for WordPress \u2013 Ultimate Form Builder Lite",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "1.5.0",
"version_value": "1.5.0"
},
{
"version_affected": "\u003c",
"version_name": "1.5.1",
"version_value": "1.5.1"
}
]
}
},
{
"product_name": "Badge Designer Lite For WooCommerce",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "1.1.0",
"version_value": "1.1.0"
},
{
"version_affected": "\u003c",
"version_name": "1.1.1",
"version_value": "1.1.1"
}
]
}
},
{
"product_name": "WordPress Slider Plugin \u2013 WP 1 Slider",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "1.2.9",
"version_value": "1.2.9"
},
{
"version_affected": "\u003c",
"version_name": "1.3.0",
"version_value": "1.3.0"
}
]
}
},
{
"product_name": "Plugin to Manage / Design WordPress Blog \u2013 WP Blog Manager Lite",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "1.1.1",
"version_value": "1.1.1"
},
{
"version_affected": "\u003c",
"version_name": "1.1.2",
"version_value": "1.1.2"
}
]
}
},
{
"product_name": "Smartest Way To Design \u0026 Customize WordPress Comments \u0026 Comment Form \u2013 WP Comment Designer Lite",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "2.0.3",
"version_value": "2.0.3"
},
{
"version_affected": "\u003c",
"version_name": "2.0.4",
"version_value": "2.0.4"
}
]
}
},
{
"product_name": "Cookie Notification Plugin for WordPress \u2013 WP Cookie User Info",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "1.0.7",
"version_value": "1.0.7"
},
{
"version_affected": "\u003c",
"version_name": "1.0.8",
"version_value": "1.0.8"
}
]
}
},
{
"product_name": "Social Review",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "1.0.9",
"version_value": "1.0.9"
}
]
}
},
{
"product_name": "MContact Button",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_name": "2.0.7",
"version_value": "2.0.7"
}
]
}
},
{
"product_name": "WP Floating Menu \u2013 One page navigator, sticky menu for WordPress",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "1.4.4",
"version_value": "1.4.4"
},
{
"version_affected": "\u003c",
"version_name": "1.4.5",
"version_value": "1.4.5"
}
]
}
},
{
"product_name": "The Easiest WordPress Media Manager Plugin \u2013 WP Media Manager Lite",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "1.1.2",
"version_value": "1.1.2"
},
{
"version_affected": "\u003c",
"version_name": "1.1.3",
"version_value": "1.1.3"
}
]
}
},
{
"product_name": "WP Popup Banners",
"version": {
"version_data": [
{
"version_affected": "\u003e=",
"version_name": "1.2.3",
"version_value": "1.2.3"
},
{
"version_affected": "\u003c",
"version_name": "1.2.4",
"version_value": "1.2.4"
}
]
}
},
{
"product_name": "WP Popup Lite \u2013 Responsive popup plugin for WordPress",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "1.0.8",
"version_value": "1.0.8"
}
]
}
},
{
"product_name": "Responsive Products Showcase Listing for WordPress \u2013 WP Product Gallery Lite",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "1.1.1",
"version_value": "1.1.1"
}
]
}
},
{
"product_name": "accessbuddy",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "1.0.0",
"version_value": "1.0.0"
}
]
}
},
{
"product_name": "Accesspress Basic",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "3.2.1",
"version_value": "3.2.1"
}
]
}
},
{
"product_name": "Accesspress Lite",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "2.92",
"version_value": "2.92"
}
]
}
},
{
"product_name": "Accesspress Mag",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "2.6.5",
"version_value": "2.6.5"
}
]
}
},
{
"product_name": "AccessPress Parallax",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "4.5",
"version_value": "4.5"
}
]
}
},
{
"product_name": "accesspress-ray",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "1.19.5",
"version_value": "1.19.5"
}
]
}
},
{
"product_name": "AccessPress Root",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "2.5",
"version_value": "2.5"
}
]
}
},
{
"product_name": "AccessPress Staple",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "1.9.1",
"version_value": "1.9.1"
}
]
}
},
{
"product_name": "AccessPress Store",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "2.4.9",
"version_value": "2.4.9"
}
]
}
},
{
"product_name": "Agency Lite",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "1.1.6",
"version_value": "1.1.6"
}
]
}
},
{
"product_name": "Aplite",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "1.0.6",
"version_value": "1.0.6"
}
]
}
},
{
"product_name": "Bingle",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "1.0.4",
"version_value": "1.0.4"
}
]
}
},
{
"product_name": "Bloger",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "1.2.6",
"version_value": "1.2.6"
}
]
}
},
{
"product_name": "Construction Lite",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "1.2.5",
"version_value": "1.2.5"
}
]
}
},
{
"product_name": "Doko",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "1.0.27",
"version_value": "1.0.27"
}
]
}
},
{
"product_name": "Enlighten",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "1.3.5",
"version_value": "1.3.5"
}
]
}
},
{
"product_name": "FashStore",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "1.2.1",
"version_value": "1.2.1"
}
]
}
},
{
"product_name": "FotoGraphy",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "2.4.0",
"version_value": "2.4.0"
}
]
}
},
{
"product_name": "Gaga Corp",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "1.0.8",
"version_value": "1.0.8"
}
]
}
},
{
"product_name": "Gaga Lite",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "1.4.2",
"version_value": "1.0.8"
}
]
}
},
{
"product_name": "One Paze",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "2.2.8",
"version_value": "2.2.8"
}
]
}
},
{
"product_name": "parallax-blog",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "3.1.1574941215",
"version_value": "3.1.1574941215"
}
]
}
},
{
"product_name": "ParallaxSome",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "1.3.6",
"version_value": "1.3.6"
}
]
}
},
{
"product_name": "Punte",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "1.1.2",
"version_value": "1.1.2"
}
]
}
},
{
"product_name": "Revolve",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "1.3.1",
"version_value": "1.3.1"
}
]
}
},
{
"product_name": "Ripple",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "1.2.0",
"version_value": "1.2.0"
}
]
}
},
{
"product_name": "ScrollMe",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "2.1.0",
"version_value": "2.1.0"
}
]
}
},
{
"product_name": "SportsMag",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "1.2.1",
"version_value": "1.2.1"
}
]
}
},
{
"product_name": "StoreVilla",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "1.4.1",
"version_value": "1.4.1"
}
]
}
},
{
"product_name": "Swing Lite",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "1.1.9",
"version_value": "1.1.9"
}
]
}
},
{
"product_name": "The Launcher",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "1.3.2",
"version_value": "1.3.2"
}
]
}
},
{
"product_name": "The Monday",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "1.4.1",
"version_value": "1.4.1"
}
]
}
},
{
"product_name": "Uncode Lite",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "1.3.1",
"version_value": "1.3.1"
}
]
}
},
{
"product_name": "Unicon Lite",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "1.2.6",
"version_value": "1.2.6"
}
]
}
},
{
"product_name": "VMag",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "1.2.7",
"version_value": "1.2.7"
}
]
}
},
{
"product_name": "VMagazine Lite",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "1.3.5",
"version_value": "1.3.5"
}
]
}
},
{
"product_name": "Vmagazine News",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "1.0.5",
"version_value": "1.0.5"
}
]
}
},
{
"product_name": "Zigcy Baby",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "1.0.6",
"version_value": "1.0.6"
}
]
}
},
{
"product_name": "Zigcy Cosmetics",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "1.0.5",
"version_value": "1.0.5"
}
]
}
},
{
"product_name": "Zigcy Lite",
"version": {
"version_data": [
{
"version_affected": "=",
"version_name": "2.0.9",
"version_value": "2.0.9"
}
]
}
}
]
},
"vendor_name": "AccessPress Themes"
}
]
}
},
"credit": [
{
"lang": "eng",
"value": "Harald Eilertsen (Jetpack Scan)"
}
],
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusion"
}
]
},
"generator": "WPScan CVE Generator",
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "CWE-912 Hidden Functionality"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://wpscan.com/vulnerability/9c76bada-fa32-4c2f-9855-d0efd1e63eff",
"refsource": "MISC",
"url": "https://wpscan.com/vulnerability/9c76bada-fa32-4c2f-9855-d0efd1e63eff"
},
{
"name": "https://jetpack.com/2022/01/18/backdoor-found-in-themes-and-plugins-from-accesspress-themes/",
"refsource": "MISC",
"url": "https://jetpack.com/2022/01/18/backdoor-found-in-themes-and-plugins-from-accesspress-themes/"
}
]
},
"source": {
"discovery": "EXTERNAL"
}
}
}
},
"cveMetadata": {
"assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81",
"assignerShortName": "WPScan",
"cveId": "CVE-2021-24867",
"datePublished": "2022-02-21T10:45:39.000Z",
"dateReserved": "2021-01-14T00:00:00.000Z",
"dateUpdated": "2024-08-03T19:49:13.412Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…
Loading…