gsd-2021-24867
Vulnerability from gsd
Modified
2023-12-13 01:23
Details
Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusion
Aliases
Aliases
{ "GSD": { "alias": "CVE-2021-24867", "description": "Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusion", "id": "GSD-2021-24867" }, "gsd": { "metadata": { "exploitCode": "unknown", "remediation": "unknown", "reportConfidence": "confirmed", "type": "vulnerability" }, "osvSchema": { "aliases": [ "CVE-2021-24867" ], "details": "Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusion", "id": "GSD-2021-24867", "modified": "2023-12-13T01:23:37.292089Z", "schema_version": "1.4.0" } }, "namespaces": { "cve.org": { "CVE_data_meta": { "ASSIGNER": "contact@wpscan.com", "ID": "CVE-2021-24867", "STATE": "PUBLIC", "TITLE": "Backdoored Plugins \u0026 Themes from AccessPress Themes" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "Frontend Post WordPress Plugin \u2013 AccessPress Anonymous Post", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "2.8.0", "version_value": "2.8.0" }, { "version_affected": "\u003c", "version_name": "2.8.1", "version_value": "2.8.1" } ] } }, { "product_name": "AccessPress Custom CSS", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "2.0.1", "version_value": "2.0.1" }, { "version_affected": "\u003c", "version_name": "2.0.2", "version_value": "2.0.2" } ] } }, { "product_name": "AccessPress Custom Post Type", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "1.0.8", "version_value": "1.0.8" }, { "version_affected": "\u003c", "version_name": "1.0.9", "version_value": "1.0.9" } ] } }, { "product_name": "Social Auto Poster", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "2.1.3", "version_value": "2.1.3" }, { "version_affected": "\u003c", "version_name": "2.1.4", "version_value": "2.1.4" } ] } }, { "product_name": "AccessPress iFeeds", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "4.0.3", "version_value": "4.0.3" }, { "version_affected": "\u003c", "version_name": "4.0.4", "version_value": "4.0.4" } ] } }, { "product_name": "PI Button", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "3.3.3", "version_value": "3.3.3" }, { "version_affected": "\u003c", "version_name": "3.3.4", "version_value": "3.3.4" } ] } }, { "product_name": "AccessPress Social Counter", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "1.9.1", "version_value": "1.9.1" }, { "version_affected": "\u003c", "version_name": "1.9.2", "version_value": "1.9.2" } ] } }, { "product_name": "AccessPress Social Icons", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "1.8.2", "version_value": "1.8.2" }, { "version_affected": "\u003c", "version_name": "1.8.3", "version_value": "1.8.3" } ] } }, { "product_name": "AccessPress Social Login Lite \u2013 Social Login WordPress Plugin", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "3.4.7", "version_value": "3.4.7" }, { "version_affected": "\u003c", "version_name": "3.4.8", "version_value": "3.4.8" } ] } }, { "product_name": "AccessPress Social Share", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "4.5.5", "version_value": "4.5.5" }, { "version_affected": "\u003c", "version_name": "4.5.6", "version_value": "4.5.6" } ] } }, { "product_name": "TAuto Poster", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "1.4.5", "version_value": "1.4.5" }, { "version_affected": "\u003c", "version_name": "1.4.6", "version_value": "1.4.6" } ] } }, { "product_name": "WP TFeed", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "1.6.7", "version_value": "1.6.7" }, { "version_affected": "\u003c", "version_name": "1.6.8", "version_value": "1.6.8" } ] } }, { "product_name": "Effectively Add \u0026 Customize Free Icons For WordPress Menus \u2013 WP Menu Icons Lite", "version": { "version_data": [ { "version_affected": "\u003c", "version_name": "1.0.9", "version_value": "1.0.9" } ] } }, { "product_name": "AP Companion", "version": { "version_data": [ { "version_affected": "\u003c", "version_name": "1.0.7", "version_value": "1.0.7" } ] } }, { "product_name": "Easiest Contact Form for WordPress \u2013 AP Contact Form", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "1.0.6", "version_value": "1.0.6" }, { "version_affected": "\u003c", "version_name": "1.0.7", "version_value": "1.0.7" } ] } }, { "product_name": "Testimonial WordPress Plugin \u2013 AP Custom Testimonial", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "1.4.6", "version_value": "1.4.6" }, { "version_affected": "\u003c", "version_name": "1.4.7", "version_value": "1.4.7" } ] } }, { "product_name": "Mega Menu Plugin for WordPress \u2013 AP Mega Menu", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "3.0.5", "version_value": "3.0.5" }, { "version_affected": "\u003c", "version_name": "3.0.6", "version_value": "3.0.6" } ] } }, { "product_name": "Pricing Table Builder \u2013 AP Pricing Tables Lite", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "1.1.3", "version_value": "1.1.3" }, { "version_affected": "\u003c", "version_name": "1.1.3", "version_value": "1.1.3" } ] } }, { "product_name": "Responsive Notification Bar Plugin for WordPress \u2013 Apex Notification Bar Lite", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "2.0.4", "version_value": "2.0.4" }, { "version_affected": "\u003c", "version_name": "2.0.5", "version_value": "2.0.5" } ] } }, { "product_name": "Form Store to DB", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "1.0.9", "version_value": "1.0.9" }, { "version_affected": "\u003c", "version_name": "1.1.0", "version_value": "1.1.0" } ] } }, { "product_name": "Comments Disable \u2013 AccessPress", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "1.0.7", "version_value": "1.0.7" }, { "version_affected": "\u003c", "version_name": "1.0.8", "version_value": "1.0.8" } ] } }, { "product_name": "CTA plugin for WordPress \u2013 Easy Side Tab", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "1.0.7", "version_value": "1.0.7" }, { "version_affected": "\u003c", "version_name": "1.0.8", "version_value": "1.0.8" } ] } }, { "product_name": "WordPress Backend Customizer \u2013 Everest Admin Theme Lite", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "1.0.7", "version_value": "1.0.7" }, { "version_affected": "\u003c", "version_name": "1.0.8", "version_value": "1.0.8" } ] } }, { "product_name": "Ultimate Coming Soon, Maintenance Mode Plugin for WordPress \u2013 Everest Coming Soon Lite", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "1.1.0", "version_value": "1.1.0" }, { "version_affected": "\u003c", "version_name": "1.1.1", "version_value": "1.1.1" } ] } }, { "product_name": "Free WordPress Plugin To Display Like/Dislike Comment Rating \u2013 Everest Comment Rating Lite", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "2.0.4", "version_value": "2.0.4" }, { "version_affected": "\u003c", "version_name": "2.0.5", "version_value": "2.0.5" } ] } }, { "product_name": "Beautiful Stat Counter Plugin for WordPress \u2013 Everest Counter Lite", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "2.0.7", "version_value": "2.0.7" }, { "version_affected": "\u003c", "version_name": "2.0.8", "version_value": "2.0.8" } ] } }, { "product_name": "Beautiful FAQ Plugin for WordPress \u2013 Everest FAQ Manager Lite", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "1.0.8", "version_value": "1.0.8" }, { "version_affected": "\u003c", "version_name": "1.0.9", "version_value": "1.0.9" } ] } }, { "product_name": "Responsive Media Gallery Plugin for WordPress \u2013 Everest Gallery Lite", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "1.0.8", "version_value": "1.0.8" }, { "version_affected": "\u003c", "version_name": "1.0.9", "version_value": "1.0.9" } ] } }, { "product_name": "Everest GPlaces Business Reviews", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "1.0.9", "version_value": "1.0.9" }, { "version_affected": "\u003c", "version_name": "2.0.0", "version_value": "2.0.0" } ] } }, { "product_name": "Everest Review Lite \u2013 User/Admin review plugin for WordPress", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.0.7", "version_value": "1.0.7" } ] } }, { "product_name": "Free Responsive Tab Plugin For WordPress \u2013 Everest Tab Lite", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "2.0.3", "version_value": "2.0.3" }, { "version_affected": "\u003c", "version_name": "2.0.4", "version_value": "2.0.4" } ] } }, { "product_name": "Responsive WordPress Timeline Plugin \u2013 Everest Timeline Lite", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "1.1.1", "version_value": "1.1.1" }, { "version_affected": "\u003c", "version_name": "1.1.2", "version_value": "1.1.2" } ] } }, { "product_name": "Inline Call To Action Builder Lite \u2013 Free Call To Action Layer Plugin for WordPress", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "1.1.0", "version_value": "1.1.0" }, { "version_affected": "\u003c", "version_name": "1.1.1", "version_value": "1.1.1" } ] } }, { "product_name": "Product Slider For WooCommerce Lite", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "1.1.5", "version_value": "1.1.5" }, { "version_affected": "\u003c", "version_name": "1.1.6", "version_value": "1.1.6" } ] } }, { "product_name": "Responsive Clients Logo Gallery Plugin for WordPress \u2013 Smart Logo Showcase Lite", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "1.1.7", "version_value": "1.1.7" }, { "version_affected": "\u003c", "version_name": "1.1.8", "version_value": "1.1.8" } ] } }, { "product_name": "Smart Scroll Posts for WordPress", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "2.0.8", "version_value": "2.0.8" }, { "version_affected": "\u003c", "version_name": "2.0.9", "version_value": "2.0.9" } ] } }, { "product_name": "Faster and Easier scroll to Top Plugin for WordPress \u2013 Smart Scroll to Top Lite", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "1.0.3", "version_value": "1.0.3" }, { "version_affected": "\u003c", "version_name": "1.0.4", "version_value": "1.0.4" } ] } }, { "product_name": "Total GDPR Compliance Lite \u2013 WordPress Plugin for GDPR Compatibility", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.0.4", "version_value": "1.0.4" } ] } }, { "product_name": "Total Team Lite \u2013 Responsive Team Manager / Showcase Plugin for WordPress", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "1.1.1", "version_value": "1.1.1" }, { "version_affected": "\u003c", "version_name": "1.1.2", "version_value": "1.1.2" } ] } }, { "product_name": "Free Responsive Post/Article Author Section Plugin for WordPress \u2013 Ultimate Author Box Lite", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "1.1.2", "version_value": "1.1.2" }, { "version_affected": "\u003c", "version_name": "1.1.3", "version_value": "1.1.3" } ] } }, { "product_name": "Contact Form for WordPress \u2013 Ultimate Form Builder Lite", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "1.5.0", "version_value": "1.5.0" }, { "version_affected": "\u003c", "version_name": "1.5.1", "version_value": "1.5.1" } ] } }, { "product_name": "Badge Designer Lite For WooCommerce", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "1.1.0", "version_value": "1.1.0" }, { "version_affected": "\u003c", "version_name": "1.1.1", "version_value": "1.1.1" } ] } }, { "product_name": "WordPress Slider Plugin \u2013 WP 1 Slider", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "1.2.9", "version_value": "1.2.9" }, { "version_affected": "\u003c", "version_name": "1.3.0", "version_value": "1.3.0" } ] } }, { "product_name": "Plugin to Manage / Design WordPress Blog \u2013 WP Blog Manager Lite", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "1.1.1", "version_value": "1.1.1" }, { "version_affected": "\u003c", "version_name": "1.1.2", "version_value": "1.1.2" } ] } }, { "product_name": "Smartest Way To Design \u0026 Customize WordPress Comments \u0026 Comment Form \u2013 WP Comment Designer Lite", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "2.0.3", "version_value": "2.0.3" }, { "version_affected": "\u003c", "version_name": "2.0.4", "version_value": "2.0.4" } ] } }, { "product_name": "Cookie Notification Plugin for WordPress \u2013 WP Cookie User Info", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "1.0.7", "version_value": "1.0.7" }, { "version_affected": "\u003c", "version_name": "1.0.8", "version_value": "1.0.8" } ] } }, { "product_name": "Social Review", "version": { "version_data": [ { "version_affected": "\u003c", "version_name": "1.0.9", "version_value": "1.0.9" } ] } }, { "product_name": "MContact Button", "version": { "version_data": [ { "version_affected": "\u003c", "version_name": "2.0.7", "version_value": "2.0.7" } ] } }, { "product_name": "WP Floating Menu \u2013 One page navigator, sticky menu for WordPress", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "1.4.4", "version_value": "1.4.4" }, { "version_affected": "\u003c", "version_name": "1.4.5", "version_value": "1.4.5" } ] } }, { "product_name": "The Easiest WordPress Media Manager Plugin \u2013 WP Media Manager Lite", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "1.1.2", "version_value": "1.1.2" }, { "version_affected": "\u003c", "version_name": "1.1.3", "version_value": "1.1.3" } ] } }, { "product_name": "WP Popup Banners", "version": { "version_data": [ { "version_affected": "\u003e=", "version_name": "1.2.3", "version_value": "1.2.3" }, { "version_affected": "\u003c", "version_name": "1.2.4", "version_value": "1.2.4" } ] } }, { "product_name": "WP Popup Lite \u2013 Responsive popup plugin for WordPress", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.0.8", "version_value": "1.0.8" } ] } }, { "product_name": "Responsive Products Showcase Listing for WordPress \u2013 WP Product Gallery Lite", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.1.1", "version_value": "1.1.1" } ] } }, { "product_name": "accessbuddy", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.0.0", "version_value": "1.0.0" } ] } }, { "product_name": "Accesspress Basic", "version": { "version_data": [ { "version_affected": "=", "version_name": "3.2.1", "version_value": "3.2.1" } ] } }, { "product_name": "Accesspress Lite", "version": { "version_data": [ { "version_affected": "=", "version_name": "2.92", "version_value": "2.92" } ] } }, { "product_name": "Accesspress Mag", "version": { "version_data": [ { "version_affected": "=", "version_name": "2.6.5", "version_value": "2.6.5" } ] } }, { "product_name": "AccessPress Parallax", "version": { "version_data": [ { "version_affected": "=", "version_name": "4.5", "version_value": "4.5" } ] } }, { "product_name": "accesspress-ray", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.19.5", "version_value": "1.19.5" } ] } }, { "product_name": "AccessPress Root", "version": { "version_data": [ { "version_affected": "=", "version_name": "2.5", "version_value": "2.5" } ] } }, { "product_name": "AccessPress Staple", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.9.1", "version_value": "1.9.1" } ] } }, { "product_name": "AccessPress Store", "version": { "version_data": [ { "version_affected": "=", "version_name": "2.4.9", "version_value": "2.4.9" } ] } }, { "product_name": "Agency Lite", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.1.6", "version_value": "1.1.6" } ] } }, { "product_name": "Aplite", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.0.6", "version_value": "1.0.6" } ] } }, { "product_name": "Bingle", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.0.4", "version_value": "1.0.4" } ] } }, { "product_name": "Bloger", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.2.6", "version_value": "1.2.6" } ] } }, { "product_name": "Construction Lite", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.2.5", "version_value": "1.2.5" } ] } }, { "product_name": "Doko", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.0.27", "version_value": "1.0.27" } ] } }, { "product_name": "Enlighten", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.3.5", "version_value": "1.3.5" } ] } }, { "product_name": "FashStore", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.2.1", "version_value": "1.2.1" } ] } }, { "product_name": "FotoGraphy", "version": { "version_data": [ { "version_affected": "=", "version_name": "2.4.0", "version_value": "2.4.0" } ] } }, { "product_name": "Gaga Corp", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.0.8", "version_value": "1.0.8" } ] } }, { "product_name": "Gaga Lite", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.4.2", "version_value": "1.0.8" } ] } }, { "product_name": "One Paze", "version": { "version_data": [ { "version_affected": "=", "version_name": "2.2.8", "version_value": "2.2.8" } ] } }, { "product_name": "parallax-blog", "version": { "version_data": [ { "version_affected": "=", "version_name": "3.1.1574941215", "version_value": "3.1.1574941215" } ] } }, { "product_name": "ParallaxSome", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.3.6", "version_value": "1.3.6" } ] } }, { "product_name": "Punte", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.1.2", "version_value": "1.1.2" } ] } }, { "product_name": "Revolve", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.3.1", "version_value": "1.3.1" } ] } }, { "product_name": "Ripple", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.2.0", "version_value": "1.2.0" } ] } }, { "product_name": "ScrollMe", "version": { "version_data": [ { "version_affected": "=", "version_name": "2.1.0", "version_value": "2.1.0" } ] } }, { "product_name": "SportsMag", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.2.1", "version_value": "1.2.1" } ] } }, { "product_name": "StoreVilla", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.4.1", "version_value": "1.4.1" } ] } }, { "product_name": "Swing Lite", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.1.9", "version_value": "1.1.9" } ] } }, { "product_name": "The Launcher", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.3.2", "version_value": "1.3.2" } ] } }, { "product_name": "The Monday", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.4.1", "version_value": "1.4.1" } ] } }, { "product_name": "Uncode Lite", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.3.1", "version_value": "1.3.1" } ] } }, { "product_name": "Unicon Lite", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.2.6", "version_value": "1.2.6" } ] } }, { "product_name": "VMag", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.2.7", "version_value": "1.2.7" } ] } }, { "product_name": "VMagazine Lite", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.3.5", "version_value": "1.3.5" } ] } }, { "product_name": "Vmagazine News", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.0.5", "version_value": "1.0.5" } ] } }, { "product_name": "Zigcy Baby", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.0.6", "version_value": "1.0.6" } ] } }, { "product_name": "Zigcy Cosmetics", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.0.5", "version_value": "1.0.5" } ] } }, { "product_name": "Zigcy Lite", "version": { "version_data": [ { "version_affected": "=", "version_name": "2.0.9", "version_value": "2.0.9" } ] } } ] }, "vendor_name": "AccessPress Themes" } ] } }, "credit": [ { "lang": "eng", "value": "Harald Eilertsen (Jetpack Scan)" } ], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusion" } ] }, "generator": "WPScan CVE Generator", "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "CWE-912 Hidden Functionality" } ] } ] }, "references": { "reference_data": [ { "name": "https://wpscan.com/vulnerability/9c76bada-fa32-4c2f-9855-d0efd1e63eff", "refsource": "MISC", "url": "https://wpscan.com/vulnerability/9c76bada-fa32-4c2f-9855-d0efd1e63eff" }, { "name": "https://jetpack.com/2022/01/18/backdoor-found-in-themes-and-plugins-from-accesspress-themes/", "refsource": "MISC", "url": "https://jetpack.com/2022/01/18/backdoor-found-in-themes-and-plugins-from-accesspress-themes/" } ] }, "source": { "discovery": "EXTERNAL" } }, "nvd.nist.gov": { "configurations": { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:a:accesspressthemes:accessbuddy:1.0.0:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:accesspress_anonymous_post:2.8.0:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:accesspress_basic:3.2.1:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:accesspress_custom_css:2.0.1:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:accesspress_custom_post_type:1.0.8:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:accesspress_ifeeds:4.0.3:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:accesspress_lite:2.92:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:accesspress_mag:2.6.5:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:accesspress_parallax:4.5:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:accesspress_ray:1.19.5:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:accesspress_root:2.5:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:accesspress_social_counter:1.9.1:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:accesspress_social_icons:1.8.2:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:accesspress_social_login_lite:3.4.7:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:accesspress_social_share:4.5.5:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:accesspress_staple:1.9.1:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:accesspress_store:2.4.9:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:agency_lite:1.1.6:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:ap_companion:*:*:*:*:*:wordpress:*:*", "cpe_name": [], "versionEndExcluding": "1.0.7", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:ap_contact_form:1.0.6:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:ap_custom_testimonial:1.4.6:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:ap_mega_menu:3.0.5:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:ap_pricing_tables_lite:1.1.2:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:apex_notification_bar_lite:2.0.4:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:aplite:1.0.6:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:badge_designer_lite_for_woocommerce:1.1.0:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:bingle:1.0.4:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:bloger:1.2.6:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:comments_disable_-_accesspress:1.0.7:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:construction_lite:1.2.5:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:doko:1.0.27:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:easy_side_tab:1.0.7:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:enlighten:1.3.5:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:everest_admin_theme_lite:1.0.7:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:everest_coming_soon_lite:1.1.0:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:everest_comment_rating_lite:2.0.4:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:everest_counter_lite:2.0.7:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:everest_faq_manager_lite:1.0.8:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:everest_gallery_lite:1.0.8:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:everest_gplaces_business_reviews:1.0.9:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:everest_review_lite:1.0.7:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:everest_tab_lite:2.0.3:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:everest_timeline_lite:1.1.1:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:fashstore:1.2.1:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:form_store_to_db:1.0.9:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:fotography:2.4.0:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:gaga_corp:1.0.8:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:gaga_lite:1.4.2:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:inline_call_to_action_builder_lite:1.1.0:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:mcontact_button:*:*:*:*:*:wordpress:*:*", "cpe_name": [], "versionEndExcluding": "2.0.7", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:one-paze:2.2.8:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:parallax_blog:3.1.1574941215:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:parallaxsome:1.3.6:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:pi_button:3.3.3:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:product_slider_for_woocommerce_lite:1.1.5:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:punte:1.1.2:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:revolve:1.3.1:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:ripple:1.2.0:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:scrollme:2.1.0:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:smart_logo_showcase_lite:1.1.7:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:smart_scroll_posts:2.0.8:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:smart_scroll_to_top_lite:1.0.3:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:social_auto_poster:2.1.3:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:social_review:*:*:*:*:*:wordpress:*:*", "cpe_name": [], "versionEndExcluding": "1.0.9", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:sportsmag:1.2.1:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:storevilla:1.4.1:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:swing_lite:1.1.9:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:tauto_poster:1.4.5:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:the_launcher:1.3.2:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:the_monday:1.4.1:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:total_gdpr_compliance_lite:1.0.4:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:total_team_lite:1.1.1:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:ultimate-form-builder-lite:1.5.0:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:ultimate_author_box_lite:1.1.2:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:uncode_lite:1.3.1:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:unicon_lite:1.2.6:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:vmag:1.2.7:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:vmagazine_lite:1.3.5:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:vmagazine_news:1.0.5:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:wp_1_slider:1.2.9:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:wp_blog_manager_lite:1.1.0:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:wp_comment_designer_lite:2.0.3:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:wp_cookie_user_info:1.0.7:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:wp_floating_menu:1.4.4:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:wp_media_manager_lite:1.1.2:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:wp_menu_icons_lite:*:*:*:*:*:wordpress:*:*", "cpe_name": [], "versionEndExcluding": "1.0.9", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:wp_popup_banners:1.2.3:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:wp_popup_lite:1.0.8:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:wp_product_gallery_lite:1.1.1:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:wp_tfeed:1.6.7:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:zigcy_baby:1.0.6:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:zigcy_cosmetics:1.0.5:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:a:accesspressthemes:zigcy_lite:2.0.9:*:*:*:*:wordpress:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] }, "cve": { "CVE_data_meta": { "ASSIGNER": "contact@wpscan.com", "ID": "CVE-2021-24867" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "en", "value": "Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusion" } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "en", "value": "CWE-912" } ] } ] }, "references": { "reference_data": [ { "name": "https://wpscan.com/vulnerability/9c76bada-fa32-4c2f-9855-d0efd1e63eff", "refsource": "MISC", "tags": [ "Exploit", "Third Party Advisory" ], "url": "https://wpscan.com/vulnerability/9c76bada-fa32-4c2f-9855-d0efd1e63eff" }, { "name": "https://jetpack.com/2022/01/18/backdoor-found-in-themes-and-plugins-from-accesspress-themes/", "refsource": "MISC", "tags": [ "Exploit", "Third Party Advisory" ], "url": "https://jetpack.com/2022/01/18/backdoor-found-in-themes-and-plugins-from-accesspress-themes/" } ] } }, "impact": { "baseMetricV2": { "acInsufInfo": false, "cvssV2": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "HIGH", "userInteractionRequired": false }, "baseMetricV3": { "cvssV3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 3.9, "impactScore": 5.9 } }, "lastModifiedDate": "2022-03-02T18:03Z", "publishedDate": "2022-02-21T11:15Z" } } }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…