CVE-2021-24867
21.02.2022, 11:15
Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusionEnginsight
| Vendor | Product | Version |
|---|---|---|
| accesspressthemes | accessbuddy | 1.0.0 |
| accesspressthemes | accesspress_anonymous_post | 2.8.0 |
| accesspressthemes | accesspress_basic | 3.2.1 |
| accesspressthemes | accesspress_custom_css | 2.0.1 |
| accesspressthemes | accesspress_custom_post_type | 1.0.8 |
| accesspressthemes | accesspress_ifeeds | 4.0.3 |
| accesspressthemes | accesspress_lite | 2.92 |
| accesspressthemes | accesspress_mag | 2.6.5 |
| accesspressthemes | accesspress_parallax | 4.5 |
| accesspressthemes | accesspress_ray | 1.19.5 |
| accesspressthemes | accesspress_root | 2.5 |
| accesspressthemes | accesspress_social_counter | 1.9.1 |
| accesspressthemes | accesspress_social_icons | 1.8.2 |
| accesspressthemes | accesspress_social_login_lite | 3.4.7 |
| accesspressthemes | accesspress_social_share | 4.5.5 |
| accesspressthemes | accesspress_staple | 1.9.1 |
| accesspressthemes | accesspress_store | 2.4.9 |
| accesspressthemes | agency_lite | 1.1.6 |
| accesspressthemes | ap_companion | 𝑥 < 1.0.7 |
| accesspressthemes | ap_contact_form | 1.0.6 |
| accesspressthemes | ap_custom_testimonial | 1.4.6 |
| accesspressthemes | ap_mega_menu | 3.0.5 |
| accesspressthemes | ap_pricing_tables_lite | 1.1.2 |
| accesspressthemes | apex_notification_bar_lite | 2.0.4 |
| accesspressthemes | aplite | 1.0.6 |
| accesspressthemes | badge_designer_lite_for_woocommerce | 1.1.0 |
| accesspressthemes | bingle | 1.0.4 |
| accesspressthemes | bloger | 1.2.6 |
| accesspressthemes | comments_disable_-_accesspress | 1.0.7 |
| accesspressthemes | construction_lite | 1.2.5 |
| accesspressthemes | doko | 1.0.27 |
| accesspressthemes | easy_side_tab | 1.0.7 |
| accesspressthemes | enlighten | 1.3.5 |
| accesspressthemes | everest_admin_theme_lite | 1.0.7 |
| accesspressthemes | everest_coming_soon_lite | 1.1.0 |
| accesspressthemes | everest_comment_rating_lite | 2.0.4 |
| accesspressthemes | everest_counter_lite | 2.0.7 |
| accesspressthemes | everest_faq_manager_lite | 1.0.8 |
| accesspressthemes | everest_gallery_lite | 1.0.8 |
| accesspressthemes | everest_gplaces_business_reviews | 1.0.9 |
| accesspressthemes | everest_review_lite | 1.0.7 |
| accesspressthemes | everest_tab_lite | 2.0.3 |
| accesspressthemes | everest_timeline_lite | 1.1.1 |
| accesspressthemes | fashstore | 1.2.1 |
| accesspressthemes | form_store_to_db | 1.0.9 |
| accesspressthemes | fotography | 2.4.0 |
| accesspressthemes | gaga_corp | 1.0.8 |
| accesspressthemes | gaga_lite | 1.4.2 |
| accesspressthemes | inline_call_to_action_builder_lite | 1.1.0 |
| accesspressthemes | mcontact_button | 𝑥 < 2.0.7 |
| accesspressthemes | one-paze | 2.2.8 |
| accesspressthemes | parallax_blog | 3.1.1574941215 |
| accesspressthemes | parallaxsome | 1.3.6 |
| accesspressthemes | pi_button | 3.3.3 |
| accesspressthemes | product_slider_for_woocommerce_lite | 1.1.5 |
| accesspressthemes | punte | 1.1.2 |
| accesspressthemes | revolve | 1.3.1 |
| accesspressthemes | ripple | 1.2.0 |
| accesspressthemes | scrollme | 2.1.0 |
| accesspressthemes | smart_logo_showcase_lite | 1.1.7 |
| accesspressthemes | smart_scroll_posts | 2.0.8 |
| accesspressthemes | smart_scroll_to_top_lite | 1.0.3 |
| accesspressthemes | social_auto_poster | 2.1.3 |
| accesspressthemes | social_review | 𝑥 < 1.0.9 |
| accesspressthemes | sportsmag | 1.2.1 |
| accesspressthemes | storevilla | 1.4.1 |
| accesspressthemes | swing_lite | 1.1.9 |
| accesspressthemes | tauto_poster | 1.4.5 |
| accesspressthemes | the_launcher | 1.3.2 |
| accesspressthemes | the_monday | 1.4.1 |
| accesspressthemes | total_gdpr_compliance_lite | 1.0.4 |
| accesspressthemes | total_team_lite | 1.1.1 |
| accesspressthemes | ultimate-form-builder-lite | 1.5.0 |
| accesspressthemes | ultimate_author_box_lite | 1.1.2 |
| accesspressthemes | uncode_lite | 1.3.1 |
| accesspressthemes | unicon_lite | 1.2.6 |
| accesspressthemes | vmag | 1.2.7 |
| accesspressthemes | vmagazine_lite | 1.3.5 |
| accesspressthemes | vmagazine_news | 1.0.5 |
| accesspressthemes | wp_1_slider | 1.2.9 |
| accesspressthemes | wp_blog_manager_lite | 1.1.0 |
| accesspressthemes | wp_comment_designer_lite | 2.0.3 |
| accesspressthemes | wp_cookie_user_info | 1.0.7 |
| accesspressthemes | wp_floating_menu | 1.4.4 |
| accesspressthemes | wp_media_manager_lite | 1.1.2 |
| accesspressthemes | wp_menu_icons_lite | 𝑥 < 1.0.9 |
| accesspressthemes | wp_popup_banners | 1.2.3 |
| accesspressthemes | wp_popup_lite | 1.0.8 |
| accesspressthemes | wp_product_gallery_lite | 1.1.1 |
| accesspressthemes | wp_tfeed | 1.6.7 |
| accesspressthemes | zigcy_baby | 1.0.6 |
| accesspressthemes | zigcy_cosmetics | 1.0.5 |
| accesspressthemes | zigcy_lite | 2.0.9 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References