CVE Feed

    Dashboard / CVE / CVE-2021-24867

    CVE-2021-24867

    Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusion

    Published:Feb 21, 2022
    Last Modified:Nov 21, 2024
    EPS:Feb 21, 2022
    EPSS Score:0.06685
    CVSS Score:9.8

    Affected Products

    Vendor
    Accesspressthemes
    Product
    Accessbuddy
    Vendor
    Accesspressthemes
    Product
    Accesspress Anonymous Post
    Vendor
    Accesspressthemes
    Product
    Accesspress Basic
    Vendor
    Accesspressthemes
    Product
    Accesspress Custom Css
    Vendor
    Accesspressthemes
    Product
    Accesspress Custom Post Type
    Vendor
    Accesspressthemes
    Product
    Accesspress Ifeeds
    Vendor
    Accesspressthemes
    Product
    Accesspress Lite
    Vendor
    Accesspressthemes
    Product
    Accesspress Mag
    Vendor
    Accesspressthemes
    Product
    Accesspress Parallax
    Vendor
    Accesspressthemes
    Product
    Accesspress Ray
    Vendor
    Accesspressthemes
    Product
    Accesspress Root
    Vendor
    Accesspressthemes
    Product
    Accesspress Social Counter
    Vendor
    Accesspressthemes
    Product
    Accesspress Social Icons
    Vendor
    Accesspressthemes
    Product
    Accesspress Social Login Lite
    Vendor
    Accesspressthemes
    Product
    Accesspress Social Share
    Vendor
    Accesspressthemes
    Product
    Accesspress Staple
    Vendor
    Accesspressthemes
    Product
    Accesspress Store
    Vendor
    Accesspressthemes
    Product
    Agency Lite
    Vendor
    Accesspressthemes
    Product
    Ap Companion
    Vendor
    Accesspressthemes
    Product
    Ap Contact Form
    Vendor
    Accesspressthemes
    Product
    Ap Custom Testimonial
    Vendor
    Accesspressthemes
    Product
    Ap Mega Menu
    Vendor
    Accesspressthemes
    Product
    Ap Pricing Tables Lite
    Vendor
    Accesspressthemes
    Product
    Apex Notification Bar Lite
    Vendor
    Accesspressthemes
    Product
    Aplite
    Vendor
    Accesspressthemes
    Product
    Badge Designer Lite For Woocommerce
    Vendor
    Accesspressthemes
    Product
    Bingle
    Vendor
    Accesspressthemes
    Product
    Bloger
    Vendor
    Accesspressthemes
    Product
    Comments Disable - Accesspress
    Vendor
    Accesspressthemes
    Product
    Construction Lite
    Vendor
    Accesspressthemes
    Product
    Doko
    Vendor
    Accesspressthemes
    Product
    Easy Side Tab
    Vendor
    Accesspressthemes
    Product
    Enlighten
    Vendor
    Accesspressthemes
    Product
    Everest Admin Theme Lite
    Vendor
    Accesspressthemes
    Product
    Everest Coming Soon Lite
    Vendor
    Accesspressthemes
    Product
    Everest Comment Rating Lite
    Vendor
    Accesspressthemes
    Product
    Everest Counter Lite
    Vendor
    Accesspressthemes
    Product
    Everest Faq Manager Lite
    Vendor
    Accesspressthemes
    Product
    Everest Gallery Lite
    Vendor
    Accesspressthemes
    Product
    Everest Gplaces Business Reviews
    Vendor
    Accesspressthemes
    Product
    Everest Review Lite
    Vendor
    Accesspressthemes
    Product
    Everest Tab Lite
    Vendor
    Accesspressthemes
    Product
    Everest Timeline Lite
    Vendor
    Accesspressthemes
    Product
    Fashstore
    Vendor
    Accesspressthemes
    Product
    Form Store To Db
    Vendor
    Accesspressthemes
    Product
    Fotography
    Vendor
    Accesspressthemes
    Product
    Gaga Corp
    Vendor
    Accesspressthemes
    Product
    Gaga Lite
    Vendor
    Accesspressthemes
    Product
    Inline Call To Action Builder Lite
    Vendor
    Accesspressthemes
    Product
    Mcontact Button
    Vendor
    Accesspressthemes
    Product
    One-paze
    Vendor
    Accesspressthemes
    Product
    Parallax Blog
    Vendor
    Accesspressthemes
    Product
    Parallaxsome
    Vendor
    Accesspressthemes
    Product
    Pi Button
    Vendor
    Accesspressthemes
    Product
    Product Slider For Woocommerce Lite
    Vendor
    Accesspressthemes
    Product
    Punte
    Vendor
    Accesspressthemes
    Product
    Revolve
    Vendor
    Accesspressthemes
    Product
    Ripple
    Vendor
    Accesspressthemes
    Product
    Scrollme
    Vendor
    Accesspressthemes
    Product
    Smart Logo Showcase Lite
    Vendor
    Accesspressthemes
    Product
    Smart Scroll Posts
    Vendor
    Accesspressthemes
    Product
    Smart Scroll To Top Lite
    Vendor
    Accesspressthemes
    Product
    Social Auto Poster
    Vendor
    Accesspressthemes
    Product
    Social Review
    Vendor
    Accesspressthemes
    Product
    Sportsmag
    Vendor
    Accesspressthemes
    Product
    Storevilla
    Vendor
    Accesspressthemes
    Product
    Swing Lite
    Vendor
    Accesspressthemes
    Product
    Tauto Poster
    Vendor
    Accesspressthemes
    Product
    The Launcher
    Vendor
    Accesspressthemes
    Product
    The Monday
    Vendor
    Accesspressthemes
    Product
    Total Gdpr Compliance Lite
    Vendor
    Accesspressthemes
    Product
    Total Team Lite
    Vendor
    Accesspressthemes
    Product
    Ultimate-form-builder-lite
    Vendor
    Accesspressthemes
    Product
    Ultimate Author Box Lite
    Vendor
    Accesspressthemes
    Product
    Uncode Lite
    Vendor
    Accesspressthemes
    Product
    Unicon Lite
    Vendor
    Accesspressthemes
    Product
    Vmag
    Vendor
    Accesspressthemes
    Product
    Vmagazine Lite
    Vendor
    Accesspressthemes
    Product
    Vmagazine News
    Vendor
    Accesspressthemes
    Product
    Wp 1 Slider
    Vendor
    Accesspressthemes
    Product
    Wp Blog Manager Lite
    Vendor
    Accesspressthemes
    Product
    Wp Comment Designer Lite
    Vendor
    Accesspressthemes
    Product
    Wp Cookie User Info
    Vendor
    Accesspressthemes
    Product
    Wp Floating Menu
    Vendor
    Accesspressthemes
    Product
    Wp Media Manager Lite
    Vendor
    Accesspressthemes
    Product
    Wp Menu Icons Lite
    Vendor
    Accesspressthemes
    Product
    Wp Popup Banners
    Vendor
    Accesspressthemes
    Product
    Wp Popup Lite
    Vendor
    Accesspressthemes
    Product
    Wp Product Gallery Lite
    Vendor
    Accesspressthemes
    Product
    Wp Tfeed
    Vendor
    Accesspressthemes
    Product
    Zigcy Baby
    Vendor
    Accesspressthemes
    Product
    Zigcy Cosmetics
    Vendor
    Accesspressthemes
    Product
    Zigcy Lite

    Exploits

    https://jetpack.com/2022/01/18/backdoor-found-in-themes-and-plugins-from-accesspress-themes/https://wpscan.com/vulnerability/9c76bada-fa32-4c2f-9855-d0efd1e63effhttps://jetpack.com/2022/01/18/backdoor-found-in-themes-and-plugins-from-accesspress-themes/https://wpscan.com/vulnerability/9c76bada-fa32-4c2f-9855-d0efd1e63eff

    Common Weakness Enumeration

    CWE-912 Hidden Functionality

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High