fkie_cve-2021-24867
Vulnerability from fkie_nvd
Published
2022-02-21 11:15
Modified
2024-11-21 05:53
Severity ?
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusion
References
contact@wpscan.comhttps://jetpack.com/2022/01/18/backdoor-found-in-themes-and-plugins-from-accesspress-themes/Exploit, Third Party Advisory
contact@wpscan.comhttps://wpscan.com/vulnerability/9c76bada-fa32-4c2f-9855-d0efd1e63effExploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://jetpack.com/2022/01/18/backdoor-found-in-themes-and-plugins-from-accesspress-themes/Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://wpscan.com/vulnerability/9c76bada-fa32-4c2f-9855-d0efd1e63effExploit, Third Party Advisory
Impacted products
Vendor Product Version
accesspressthemes accessbuddy 1.0.0
accesspressthemes accesspress_anonymous_post 2.8.0
accesspressthemes accesspress_basic 3.2.1
accesspressthemes accesspress_custom_css 2.0.1
accesspressthemes accesspress_custom_post_type 1.0.8
accesspressthemes accesspress_ifeeds 4.0.3
accesspressthemes accesspress_lite 2.92
accesspressthemes accesspress_mag 2.6.5
accesspressthemes accesspress_parallax 4.5
accesspressthemes accesspress_ray 1.19.5
accesspressthemes accesspress_root 2.5
accesspressthemes accesspress_social_counter 1.9.1
accesspressthemes accesspress_social_icons 1.8.2
accesspressthemes accesspress_social_login_lite 3.4.7
accesspressthemes accesspress_social_share 4.5.5
accesspressthemes accesspress_staple 1.9.1
accesspressthemes accesspress_store 2.4.9
accesspressthemes agency_lite 1.1.6
accesspressthemes ap_companion *
accesspressthemes ap_contact_form 1.0.6
accesspressthemes ap_custom_testimonial 1.4.6
accesspressthemes ap_mega_menu 3.0.5
accesspressthemes ap_pricing_tables_lite 1.1.2
accesspressthemes apex_notification_bar_lite 2.0.4
accesspressthemes aplite 1.0.6
accesspressthemes badge_designer_lite_for_woocommerce 1.1.0
accesspressthemes bingle 1.0.4
accesspressthemes bloger 1.2.6
accesspressthemes comments_disable_-_accesspress 1.0.7
accesspressthemes construction_lite 1.2.5
accesspressthemes doko 1.0.27
accesspressthemes easy_side_tab 1.0.7
accesspressthemes enlighten 1.3.5
accesspressthemes everest_admin_theme_lite 1.0.7
accesspressthemes everest_coming_soon_lite 1.1.0
accesspressthemes everest_comment_rating_lite 2.0.4
accesspressthemes everest_counter_lite 2.0.7
accesspressthemes everest_faq_manager_lite 1.0.8
accesspressthemes everest_gallery_lite 1.0.8
accesspressthemes everest_gplaces_business_reviews 1.0.9
accesspressthemes everest_review_lite 1.0.7
accesspressthemes everest_tab_lite 2.0.3
accesspressthemes everest_timeline_lite 1.1.1
accesspressthemes fashstore 1.2.1
accesspressthemes form_store_to_db 1.0.9
accesspressthemes fotography 2.4.0
accesspressthemes gaga_corp 1.0.8
accesspressthemes gaga_lite 1.4.2
accesspressthemes inline_call_to_action_builder_lite 1.1.0
accesspressthemes mcontact_button *
accesspressthemes one-paze 2.2.8
accesspressthemes parallax_blog 3.1.1574941215
accesspressthemes parallaxsome 1.3.6
accesspressthemes pi_button 3.3.3
accesspressthemes product_slider_for_woocommerce_lite 1.1.5
accesspressthemes punte 1.1.2
accesspressthemes revolve 1.3.1
accesspressthemes ripple 1.2.0
accesspressthemes scrollme 2.1.0
accesspressthemes smart_logo_showcase_lite 1.1.7
accesspressthemes smart_scroll_posts 2.0.8
accesspressthemes smart_scroll_to_top_lite 1.0.3
accesspressthemes social_auto_poster 2.1.3
accesspressthemes social_review *
accesspressthemes sportsmag 1.2.1
accesspressthemes storevilla 1.4.1
accesspressthemes swing_lite 1.1.9
accesspressthemes tauto_poster 1.4.5
accesspressthemes the_launcher 1.3.2
accesspressthemes the_monday 1.4.1
accesspressthemes total_gdpr_compliance_lite 1.0.4
accesspressthemes total_team_lite 1.1.1
accesspressthemes ultimate-form-builder-lite 1.5.0
accesspressthemes ultimate_author_box_lite 1.1.2
accesspressthemes uncode_lite 1.3.1
accesspressthemes unicon_lite 1.2.6
accesspressthemes vmag 1.2.7
accesspressthemes vmagazine_lite 1.3.5
accesspressthemes vmagazine_news 1.0.5
accesspressthemes wp_1_slider 1.2.9
accesspressthemes wp_blog_manager_lite 1.1.0
accesspressthemes wp_comment_designer_lite 2.0.3
accesspressthemes wp_cookie_user_info 1.0.7
accesspressthemes wp_floating_menu 1.4.4
accesspressthemes wp_media_manager_lite 1.1.2
accesspressthemes wp_menu_icons_lite *
accesspressthemes wp_popup_banners 1.2.3
accesspressthemes wp_popup_lite 1.0.8
accesspressthemes wp_product_gallery_lite 1.1.1
accesspressthemes wp_tfeed 1.6.7
accesspressthemes zigcy_baby 1.0.6
accesspressthemes zigcy_cosmetics 1.0.5
accesspressthemes zigcy_lite 2.0.9


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:accesspressthemes:accessbuddy:1.0.0:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "E0E2E1EC-1296-4488-9DD5-65BDC7D99E90",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:accesspress_anonymous_post:2.8.0:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "9DB6A0F7-5316-48C5-A67F-5686ACFA7B16",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:accesspress_basic:3.2.1:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "77B6CF65-62BC-4B71-9166-BE64381BE363",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:accesspress_custom_css:2.0.1:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "72663450-A5DB-4C0D-8363-86E473863A5C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:accesspress_custom_post_type:1.0.8:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "9ACBAD01-C184-4559-A781-D521276F2B9B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:accesspress_ifeeds:4.0.3:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "DAC6AC47-ABED-4BBF-9F99-90E2281E4278",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:accesspress_lite:2.92:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "947DA0D0-945B-40FF-8409-4EEB1E6A052C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:accesspress_mag:2.6.5:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "BE47A193-157F-4A6E-BFA7-024A884D786A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:accesspress_parallax:4.5:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "ED7EF9E0-AB9E-4A5F-A794-2F366D8B361B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:accesspress_ray:1.19.5:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "19E9C6D4-D18A-4E7E-8B67-7F793942C020",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:accesspress_root:2.5:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "EDFB43E3-1DF6-49BB-9999-976A3B4D4275",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:accesspress_social_counter:1.9.1:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "83C19380-C443-4F69-ABA3-606EDC86F92D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:accesspress_social_icons:1.8.2:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "68E80A19-743D-48D3-9830-BDE76656AF09",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:accesspress_social_login_lite:3.4.7:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "58DC02D0-9611-4E39-A2A7-F458863EE676",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:accesspress_social_share:4.5.5:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "B4B8AB2B-A841-4F58-8E86-010B68120EAD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:accesspress_staple:1.9.1:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "59915BAD-9110-4DEE-9246-96A823EC90DC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:accesspress_store:2.4.9:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "AB47E50A-E1B6-4E93-A853-1F711968DECF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:agency_lite:1.1.6:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "C219805E-4479-47AB-BB49-F801E272CDD6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:ap_companion:*:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "921B012B-328B-4525-8D8D-EF7278A320D2",
              "versionEndExcluding": "1.0.7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:ap_contact_form:1.0.6:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "FD1F82BC-D794-4B5C-B3C9-52695E9095A8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:ap_custom_testimonial:1.4.6:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "9EECFB20-A07F-4BE3-A02E-080542937E12",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:ap_mega_menu:3.0.5:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "F857A990-2B25-465E-BBA8-807F232B424A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:ap_pricing_tables_lite:1.1.2:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "DD7C09B4-EC7E-4047-8F30-9BE31BEE1964",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:apex_notification_bar_lite:2.0.4:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "8AA63079-AE11-4C63-83A8-CDEF7FA3C8D6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:aplite:1.0.6:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "09D41139-554C-41B3-9FD2-001F572EC66E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:badge_designer_lite_for_woocommerce:1.1.0:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "EA37FC2D-3F62-43C8-8361-38C7D205D28E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:bingle:1.0.4:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "6871FBD6-AA75-4CA0-AEAD-D4881CB5CA88",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:bloger:1.2.6:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "120E0BB2-3859-45CD-B87F-B62377736693",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:comments_disable_-_accesspress:1.0.7:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "9D45BF3D-675E-4608-84A3-97691144AD2E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:construction_lite:1.2.5:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "3E507952-7F0F-4559-A005-2C5D82CA1558",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:doko:1.0.27:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "1815F3AD-6FA7-4FA9-BBED-8D1CA082CAD3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:easy_side_tab:1.0.7:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "0E593F6A-418C-46AE-990F-ABE69B4E510F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:enlighten:1.3.5:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "86CBD1DE-AEF4-4E9A-A9DC-29E68FD45B0E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:everest_admin_theme_lite:1.0.7:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "27A09E61-82E4-46AB-9186-C6E3F5A62488",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:everest_coming_soon_lite:1.1.0:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "80298D7B-2FE9-489C-8DF9-ABBCEF6C405A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:everest_comment_rating_lite:2.0.4:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "A7B237A5-05D3-469C-9B07-F2903DAECD0D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:everest_counter_lite:2.0.7:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "8180E531-64F7-40D1-9677-8E5EAB67E327",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:everest_faq_manager_lite:1.0.8:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "1A84EF3F-DA1E-4841-B6FF-D03F010219A9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:everest_gallery_lite:1.0.8:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "79CCE5DD-C1E3-4740-8F83-D6B46ACC9B9B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:everest_gplaces_business_reviews:1.0.9:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "24C537B7-644D-4C53-95D0-1F9F96516A4A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:everest_review_lite:1.0.7:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "5A993DD0-37D6-443B-90E8-D3D2AA4C86FC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:everest_tab_lite:2.0.3:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "6B1A1BD4-CE70-49BE-B1C0-BCCB11465FA6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:everest_timeline_lite:1.1.1:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "9C595A1C-1D5A-4C40-B6A5-81AC83E0FB83",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:fashstore:1.2.1:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "C6E9871E-D730-4C94-A266-DC4F182B9B7E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:form_store_to_db:1.0.9:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "22CB4076-8B6B-44EE-87BA-F5504F7294CE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:fotography:2.4.0:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "C6E9E780-1FCD-41A2-BA98-C0945926ABA3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:gaga_corp:1.0.8:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "F610CC19-ED47-4782-B066-CB5EE14C4E6A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:gaga_lite:1.4.2:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "EC397124-CEAC-425E-8E6F-A7E28379650E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:inline_call_to_action_builder_lite:1.1.0:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "6288D82A-4A8D-41A0-8F23-281AC38185A0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:mcontact_button:*:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "641EAFBA-1A5B-4381-9F2E-EFCB167BECF8",
              "versionEndExcluding": "2.0.7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:one-paze:2.2.8:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "5B506364-73A8-4BE4-8AB5-6AD5C26B621D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:parallax_blog:3.1.1574941215:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "A5649343-1532-49F8-896E-B418F5A38964",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:parallaxsome:1.3.6:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "1D45B2E6-B6E4-4B05-9EEA-A227339E056F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:pi_button:3.3.3:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "9992FD4F-814D-4040-A57B-2E977A161D33",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:product_slider_for_woocommerce_lite:1.1.5:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "52D20509-9110-43B8-A92F-10B0CEEF8B79",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:punte:1.1.2:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "05B68DFC-7190-45E9-BB0A-3BED0C16BBB4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:revolve:1.3.1:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "64EFFC40-6224-4BFA-A0B4-4FB44FE5846E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:ripple:1.2.0:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "0BFB0E2E-7612-408A-91F4-F2404294AEEA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:scrollme:2.1.0:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "682DDDCD-54CD-4851-A848-525366E18FAC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:smart_logo_showcase_lite:1.1.7:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "D3C00E24-9469-4D3A-9050-346BCA2EAF92",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:smart_scroll_posts:2.0.8:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "0D373B5A-4824-4E68-AC37-5D5167FF9BF1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:smart_scroll_to_top_lite:1.0.3:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "52F97235-F9D7-42FB-94AF-7A5D119D134F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:social_auto_poster:2.1.3:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "B1FAE216-AE14-42BE-8A89-50AC6FA7A465",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:social_review:*:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "7E2218A0-B03F-4CA9-A2BE-B44A17B056AD",
              "versionEndExcluding": "1.0.9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:sportsmag:1.2.1:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "BE2DB702-F204-407F-9AB7-6628337929A1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:storevilla:1.4.1:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "BD8D522A-BF97-4799-BD71-23F194ACA6DE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:swing_lite:1.1.9:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "56A9CB85-7421-4005-8455-77C3CE596DF2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:tauto_poster:1.4.5:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "42ED1C6F-426C-4A84-908D-32A72B3C2CA3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:the_launcher:1.3.2:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "EB710098-359C-45CF-96E6-5434A0D93E33",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:the_monday:1.4.1:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "493468DB-13E6-4E01-976C-3CB25ECA33AE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:total_gdpr_compliance_lite:1.0.4:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "88ED3BEB-008F-4856-B3A8-42AA036603F2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:total_team_lite:1.1.1:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "C9A45A65-D55C-4F7A-B790-880DB381199D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:ultimate-form-builder-lite:1.5.0:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "C38617D2-670C-4DB5-9595-1401686884E9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:ultimate_author_box_lite:1.1.2:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "BD129DB2-8E65-44F3-B9FE-EF7F14E4150B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:uncode_lite:1.3.1:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "FE60843A-7826-4D30-93A2-BE8037491E8B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:unicon_lite:1.2.6:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "6EC671D2-3BE5-49A2-BBE3-C9C05D0DF4EA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:vmag:1.2.7:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "58EBD406-FC61-4766-9A66-9750B40C8A8B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:vmagazine_lite:1.3.5:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "87CA781B-7678-4514-824A-A42518762FA9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:vmagazine_news:1.0.5:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "2A23BC3E-A5E4-4AED-8D0F-9B237AC47F98",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:wp_1_slider:1.2.9:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "2E5CF34E-BD39-41F0-BD03-ACB4E972939B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:wp_blog_manager_lite:1.1.0:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "A3D48950-253A-4AB4-9F90-8B83EFBBD860",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:wp_comment_designer_lite:2.0.3:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "E40E8D77-812E-42EA-8DBC-1461F4888F60",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:wp_cookie_user_info:1.0.7:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "93002D29-C169-4F80-BABB-E160D4E046E9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:wp_floating_menu:1.4.4:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "37DBEFD1-F7B2-4483-82F6-A9BB1DCB3D92",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:wp_media_manager_lite:1.1.2:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "1858DB3C-84CE-4D16-A008-16906F21AB48",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:wp_menu_icons_lite:*:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "99C1DCEF-EFAA-495B-9790-247F8C353351",
              "versionEndExcluding": "1.0.9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:wp_popup_banners:1.2.3:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "1CF6B83D-6527-4F58-96F7-DA6A9798B47B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:wp_popup_lite:1.0.8:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "E64E243E-00D4-4C72-A454-0CA884BD6A87",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:wp_product_gallery_lite:1.1.1:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "B975698C-B1AE-4ECF-AE47-499CF0641068",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:wp_tfeed:1.6.7:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "AD008D2A-5704-459C-B08E-D762223D1EC7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:zigcy_baby:1.0.6:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "2A9CD506-B2D2-44C1-95F8-ED15705EF638",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:zigcy_cosmetics:1.0.5:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "049045EF-99CA-49D6-A3BD-725CC74B4374",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:accesspressthemes:zigcy_lite:2.0.9:*:*:*:*:wordpress:*:*",
              "matchCriteriaId": "6B6E41C9-8603-41DE-9689-C030DEF2BBFC",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusion"
    },
    {
      "lang": "es",
      "value": "Numerosos plugins y temas del proveedor de AccessPress Themes (tambi\u00e9n se conoce como Access Keys) han sido perjudicados debido a que su sitio web ha sido comprometido. S\u00f3lo est\u00e1n afectados los plugins y temas descargados por medio del sitio web del proveedor, no as\u00ed los alojados en wordpress.org. Sin embargo, todos ellos fueron actualizados o eliminados para evitar cualquier confusi\u00f3n"
    }
  ],
  "id": "CVE-2021-24867",
  "lastModified": "2024-11-21T05:53:55.020",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2022-02-21T11:15:08.320",
  "references": [
    {
      "source": "contact@wpscan.com",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "https://jetpack.com/2022/01/18/backdoor-found-in-themes-and-plugins-from-accesspress-themes/"
    },
    {
      "source": "contact@wpscan.com",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "https://wpscan.com/vulnerability/9c76bada-fa32-4c2f-9855-d0efd1e63eff"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "https://jetpack.com/2022/01/18/backdoor-found-in-themes-and-plugins-from-accesspress-themes/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "https://wpscan.com/vulnerability/9c76bada-fa32-4c2f-9855-d0efd1e63eff"
    }
  ],
  "sourceIdentifier": "contact@wpscan.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-912"
        }
      ],
      "source": "contact@wpscan.com",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.