CVE-2021-24867

Summary

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusion

Affected Software

VendorProductVersion RangeStatus
AccessPress ThemesFrontend Post WordPress Plugin – AccessPress Anonymous Post2.8.0 < 2.8.0*affected
AccessPress ThemesFrontend Post WordPress Plugin – AccessPress Anonymous Post2.8.1 < 2.8.1affected
AccessPress ThemesAccessPress Custom CSS2.0.1 < 2.0.1*affected
AccessPress ThemesAccessPress Custom CSS2.0.2 < 2.0.2affected
AccessPress ThemesAccessPress Custom Post Type1.0.8 < 1.0.8*affected
AccessPress ThemesAccessPress Custom Post Type1.0.9 < 1.0.9affected
AccessPress ThemesSocial Auto Poster2.1.3 < 2.1.3*affected
AccessPress ThemesSocial Auto Poster2.1.4 < 2.1.4affected
AccessPress ThemesAccessPress iFeeds4.0.3 < 4.0.3*affected
AccessPress ThemesAccessPress iFeeds4.0.4 < 4.0.4affected
AccessPress ThemesPI Button3.3.3 < 3.3.3*affected
AccessPress ThemesPI Button3.3.4 < 3.3.4affected
AccessPress ThemesAccessPress Social Counter1.9.1 < 1.9.1*affected
AccessPress ThemesAccessPress Social Counter1.9.2 < 1.9.2affected
AccessPress ThemesAccessPress Social Icons1.8.2 < 1.8.2*affected
AccessPress ThemesAccessPress Social Icons1.8.3 < 1.8.3affected
AccessPress ThemesAccessPress Social Login Lite – Social Login WordPress Plugin3.4.7 < 3.4.7*affected
AccessPress ThemesAccessPress Social Login Lite – Social Login WordPress Plugin3.4.8 < 3.4.8affected
AccessPress ThemesAccessPress Social Share4.5.5 < 4.5.5*affected
AccessPress ThemesAccessPress Social Share4.5.6 < 4.5.6affected
AccessPress ThemesTAuto Poster1.4.5 < 1.4.5*affected
AccessPress ThemesTAuto Poster1.4.6 < 1.4.6affected
AccessPress ThemesWP TFeed1.6.7 < 1.6.7*affected
AccessPress ThemesWP TFeed1.6.8 < 1.6.8affected
AccessPress ThemesEffectively Add & Customize Free Icons For WordPress Menus – WP Menu Icons Lite1.0.9 < 1.0.9affected
AccessPress ThemesAP Companion1.0.7 < 1.0.7affected
AccessPress ThemesEasiest Contact Form for WordPress – AP Contact Form1.0.6 < 1.0.6*affected
AccessPress ThemesEasiest Contact Form for WordPress – AP Contact Form1.0.7 < 1.0.7affected
AccessPress ThemesTestimonial WordPress Plugin – AP Custom Testimonial1.4.6 < 1.4.6*affected
AccessPress ThemesTestimonial WordPress Plugin – AP Custom Testimonial1.4.7 < 1.4.7affected
AccessPress ThemesMega Menu Plugin for WordPress – AP Mega Menu3.0.5 < 3.0.5*affected
AccessPress ThemesMega Menu Plugin for WordPress – AP Mega Menu3.0.6 < 3.0.6affected
AccessPress ThemesPricing Table Builder – AP Pricing Tables Lite1.1.3 < 1.1.3*affected
AccessPress ThemesResponsive Notification Bar Plugin for WordPress – Apex Notification Bar Lite2.0.4 < 2.0.4*affected
AccessPress ThemesResponsive Notification Bar Plugin for WordPress – Apex Notification Bar Lite2.0.5 < 2.0.5affected
AccessPress ThemesForm Store to DB1.0.9 < 1.0.9*affected
AccessPress ThemesForm Store to DB1.1.0 < 1.1.0affected
AccessPress ThemesComments Disable – AccessPress1.0.7 < 1.0.7*affected
AccessPress ThemesComments Disable – AccessPress1.0.8 < 1.0.8affected
AccessPress ThemesCTA plugin for WordPress – Easy Side Tab1.0.7 < 1.0.7*affected
AccessPress ThemesCTA plugin for WordPress – Easy Side Tab1.0.8 < 1.0.8affected
AccessPress ThemesWordPress Backend Customizer – Everest Admin Theme Lite1.0.7 < 1.0.7*affected
AccessPress ThemesWordPress Backend Customizer – Everest Admin Theme Lite1.0.8 < 1.0.8affected
AccessPress ThemesUltimate Coming Soon, Maintenance Mode Plugin for WordPress – Everest Coming Soon Lite1.1.0 < 1.1.0*affected
AccessPress ThemesUltimate Coming Soon, Maintenance Mode Plugin for WordPress – Everest Coming Soon Lite1.1.1 < 1.1.1affected
AccessPress ThemesFree WordPress Plugin To Display Like/Dislike Comment Rating – Everest Comment Rating Lite2.0.4 < 2.0.4*affected
AccessPress ThemesFree WordPress Plugin To Display Like/Dislike Comment Rating – Everest Comment Rating Lite2.0.5 < 2.0.5affected
AccessPress ThemesBeautiful Stat Counter Plugin for WordPress – Everest Counter Lite2.0.7 < 2.0.7*affected
AccessPress ThemesBeautiful Stat Counter Plugin for WordPress – Everest Counter Lite2.0.8 < 2.0.8affected
AccessPress ThemesBeautiful FAQ Plugin for WordPress – Everest FAQ Manager Lite1.0.8 < 1.0.8*affected
AccessPress ThemesBeautiful FAQ Plugin for WordPress – Everest FAQ Manager Lite1.0.9 < 1.0.9affected
AccessPress ThemesResponsive Media Gallery Plugin for WordPress – Everest Gallery Lite1.0.8 < 1.0.8*affected
AccessPress ThemesResponsive Media Gallery Plugin for WordPress – Everest Gallery Lite1.0.9 < 1.0.9affected
AccessPress ThemesEverest GPlaces Business Reviews1.0.9 < 1.0.9*affected
AccessPress ThemesEverest GPlaces Business Reviews2.0.0 < 2.0.0affected
AccessPress ThemesEverest Review Lite – User/Admin review plugin for WordPress1.0.7affected
AccessPress ThemesFree Responsive Tab Plugin For WordPress – Everest Tab Lite2.0.3 < 2.0.3*affected
AccessPress ThemesFree Responsive Tab Plugin For WordPress – Everest Tab Lite2.0.4 < 2.0.4affected
AccessPress ThemesResponsive WordPress Timeline Plugin – Everest Timeline Lite1.1.1 < 1.1.1*affected
AccessPress ThemesResponsive WordPress Timeline Plugin – Everest Timeline Lite1.1.2 < 1.1.2affected
AccessPress ThemesInline Call To Action Builder Lite – Free Call To Action Layer Plugin for WordPress1.1.0 < 1.1.0*affected
AccessPress ThemesInline Call To Action Builder Lite – Free Call To Action Layer Plugin for WordPress1.1.1 < 1.1.1affected
AccessPress ThemesProduct Slider For WooCommerce Lite1.1.5 < 1.1.5*affected
AccessPress ThemesProduct Slider For WooCommerce Lite1.1.6 < 1.1.6affected
AccessPress ThemesResponsive Clients Logo Gallery Plugin for WordPress – Smart Logo Showcase Lite1.1.7 < 1.1.7*affected
AccessPress ThemesResponsive Clients Logo Gallery Plugin for WordPress – Smart Logo Showcase Lite1.1.8 < 1.1.8affected
AccessPress ThemesSmart Scroll Posts for WordPress2.0.8 < 2.0.8*affected
AccessPress ThemesSmart Scroll Posts for WordPress2.0.9 < 2.0.9affected
AccessPress ThemesFaster and Easier scroll to Top Plugin for WordPress – Smart Scroll to Top Lite1.0.3 < 1.0.3*affected
AccessPress ThemesFaster and Easier scroll to Top Plugin for WordPress – Smart Scroll to Top Lite1.0.4 < 1.0.4affected
AccessPress ThemesTotal GDPR Compliance Lite – WordPress Plugin for GDPR Compatibility1.0.4affected
AccessPress ThemesTotal Team Lite – Responsive Team Manager / Showcase Plugin for WordPress1.1.1 < 1.1.1*affected
AccessPress ThemesTotal Team Lite – Responsive Team Manager / Showcase Plugin for WordPress1.1.2 < 1.1.2affected
AccessPress ThemesFree Responsive Post/Article Author Section Plugin for WordPress – Ultimate Author Box Lite1.1.2 < 1.1.2*affected
AccessPress ThemesFree Responsive Post/Article Author Section Plugin for WordPress – Ultimate Author Box Lite1.1.3 < 1.1.3affected
AccessPress ThemesContact Form for WordPress – Ultimate Form Builder Lite1.5.0 < 1.5.0*affected
AccessPress ThemesContact Form for WordPress – Ultimate Form Builder Lite1.5.1 < 1.5.1affected
AccessPress ThemesBadge Designer Lite For WooCommerce1.1.0 < 1.1.0*affected
AccessPress ThemesBadge Designer Lite For WooCommerce1.1.1 < 1.1.1affected
AccessPress ThemesWordPress Slider Plugin – WP 1 Slider1.2.9 < 1.2.9*affected
AccessPress ThemesWordPress Slider Plugin – WP 1 Slider1.3.0 < 1.3.0affected
AccessPress ThemesPlugin to Manage / Design WordPress Blog – WP Blog Manager Lite1.1.1 < 1.1.1*affected
AccessPress ThemesPlugin to Manage / Design WordPress Blog – WP Blog Manager Lite1.1.2 < 1.1.2affected
AccessPress ThemesSmartest Way To Design & Customize WordPress Comments & Comment Form – WP Comment Designer Lite2.0.3 < 2.0.3*affected
AccessPress ThemesSmartest Way To Design & Customize WordPress Comments & Comment Form – WP Comment Designer Lite2.0.4 < 2.0.4affected
AccessPress ThemesCookie Notification Plugin for WordPress – WP Cookie User Info1.0.7 < 1.0.7*affected
AccessPress ThemesCookie Notification Plugin for WordPress – WP Cookie User Info1.0.8 < 1.0.8affected
AccessPress ThemesSocial Review1.0.9 < 1.0.9affected
AccessPress ThemesMContact Button2.0.7 < 2.0.7affected
AccessPress ThemesWP Floating Menu – One page navigator, sticky menu for WordPress1.4.4 < 1.4.4*affected
AccessPress ThemesWP Floating Menu – One page navigator, sticky menu for WordPress1.4.5 < 1.4.5affected
AccessPress ThemesThe Easiest WordPress Media Manager Plugin – WP Media Manager Lite1.1.2 < 1.1.2*affected
AccessPress ThemesThe Easiest WordPress Media Manager Plugin – WP Media Manager Lite1.1.3 < 1.1.3affected
AccessPress ThemesWP Popup Banners1.2.3 < 1.2.3*affected
AccessPress ThemesWP Popup Banners1.2.4 < 1.2.4affected
AccessPress ThemesWP Popup Lite – Responsive popup plugin for WordPress1.0.8affected
AccessPress ThemesResponsive Products Showcase Listing for WordPress – WP Product Gallery Lite1.1.1affected
AccessPress Themesaccessbuddy1.0.0affected
AccessPress ThemesAccesspress Basic3.2.1affected
AccessPress ThemesAccesspress Lite2.92affected
AccessPress ThemesAccesspress Mag2.6.5affected
AccessPress ThemesAccessPress Parallax4.5affected
AccessPress Themesaccesspress-ray1.19.5affected
AccessPress ThemesAccessPress Root2.5affected
AccessPress ThemesAccessPress Staple1.9.1affected
AccessPress ThemesAccessPress Store2.4.9affected
AccessPress ThemesAgency Lite1.1.6affected
AccessPress ThemesAplite1.0.6affected
AccessPress ThemesBingle1.0.4affected
AccessPress ThemesBloger1.2.6affected
AccessPress ThemesConstruction Lite1.2.5affected
AccessPress ThemesDoko1.0.27affected
AccessPress ThemesEnlighten1.3.5affected
AccessPress ThemesFashStore1.2.1affected
AccessPress ThemesFotoGraphy2.4.0affected
AccessPress ThemesGaga Corp1.0.8affected
AccessPress ThemesGaga Lite1.4.2 1.0.8affected
AccessPress ThemesOne Paze2.2.8affected
AccessPress Themesparallax-blog3.1.1574941215affected
AccessPress ThemesParallaxSome1.3.6affected
AccessPress ThemesPunte1.1.2affected
AccessPress ThemesRevolve1.3.1affected
AccessPress ThemesRipple1.2.0affected
AccessPress ThemesScrollMe2.1.0affected
AccessPress ThemesSportsMag1.2.1affected
AccessPress ThemesStoreVilla1.4.1affected
AccessPress ThemesSwing Lite1.1.9affected
AccessPress ThemesThe Launcher1.3.2affected
AccessPress ThemesThe Monday1.4.1affected
AccessPress ThemesUncode Lite1.3.1affected
AccessPress ThemesUnicon Lite1.2.6affected
AccessPress ThemesVMag1.2.7affected
AccessPress ThemesVMagazine Lite1.3.5affected
AccessPress ThemesVmagazine News1.0.5affected
AccessPress ThemesZigcy Baby1.0.6affected
AccessPress ThemesZigcy Cosmetics1.0.5affected
AccessPress ThemesZigcy Lite2.0.9affected

Weaknesses

  • CWE-912: CWE-912 Hidden Functionality

ADP Enrichment

CVE Program Container

Additional References

References