blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2021-24867

CRITICAL 9.8 CVSS 3.1
Published
February 21, 2022
Last modified
June 17, 2026
NVD status
Modified
Reported by
contact@wpscan.com
Weakness
CWE-912
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusion

Affected WordPress components

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

  • AccessPress Themes Frontend Post WordPress Plugin – AccessPress Anonymous Post — From 2.8.0 (including) to 2.8.0* (excluding)
  • AccessPress Themes Frontend Post WordPress Plugin – AccessPress Anonymous Post — From 2.8.1 (including) to 2.8.1 (excluding)
  • AccessPress Themes AccessPress Custom CSS — From 2.0.1 (including) to 2.0.1* (excluding)
  • AccessPress Themes AccessPress Custom CSS — From 2.0.2 (including) to 2.0.2 (excluding)
  • AccessPress Themes AccessPress Custom Post Type — From 1.0.8 (including) to 1.0.8* (excluding)
  • AccessPress Themes AccessPress Custom Post Type — From 1.0.9 (including) to 1.0.9 (excluding)
  • AccessPress Themes Social Auto Poster — From 2.1.3 (including) to 2.1.3* (excluding)
  • AccessPress Themes Social Auto Poster — From 2.1.4 (including) to 2.1.4 (excluding)
  • AccessPress Themes AccessPress iFeeds — From 4.0.3 (including) to 4.0.3* (excluding)
  • AccessPress Themes AccessPress iFeeds — From 4.0.4 (including) to 4.0.4 (excluding)
  • AccessPress Themes PI Button — From 3.3.3 (including) to 3.3.3* (excluding)
  • AccessPress Themes PI Button — From 3.3.4 (including) to 3.3.4 (excluding)
  • AccessPress Themes AccessPress Social Counter — From 1.9.1 (including) to 1.9.1* (excluding)
  • AccessPress Themes AccessPress Social Counter — From 1.9.2 (including) to 1.9.2 (excluding)
  • AccessPress Themes AccessPress Social Icons — From 1.8.2 (including) to 1.8.2* (excluding)
  • AccessPress Themes AccessPress Social Icons — From 1.8.3 (including) to 1.8.3 (excluding)
  • AccessPress Themes AccessPress Social Login Lite – Social Login WordPress Plugin — From 3.4.7 (including) to 3.4.7* (excluding)
  • AccessPress Themes AccessPress Social Login Lite – Social Login WordPress Plugin — From 3.4.8 (including) to 3.4.8 (excluding)
  • AccessPress Themes AccessPress Social Share — From 4.5.5 (including) to 4.5.5* (excluding)
  • AccessPress Themes AccessPress Social Share — From 4.5.6 (including) to 4.5.6 (excluding)
  • AccessPress Themes TAuto Poster — From 1.4.5 (including) to 1.4.5* (excluding)
  • AccessPress Themes TAuto Poster — From 1.4.6 (including) to 1.4.6 (excluding)
  • AccessPress Themes WP TFeed — From 1.6.7 (including) to 1.6.7* (excluding)
  • AccessPress Themes WP TFeed — From 1.6.8 (including) to 1.6.8 (excluding)
  • AccessPress Themes Effectively Add & Customize Free Icons For WordPress Menus – WP Menu Icons Lite — From 1.0.9 (including) to 1.0.9 (excluding)
  • AccessPress Themes AP Companion — From 1.0.7 (including) to 1.0.7 (excluding)
  • AccessPress Themes Easiest Contact Form for WordPress – AP Contact Form — From 1.0.6 (including) to 1.0.6* (excluding)
  • AccessPress Themes Easiest Contact Form for WordPress – AP Contact Form — From 1.0.7 (including) to 1.0.7 (excluding)
  • AccessPress Themes Testimonial WordPress Plugin – AP Custom Testimonial — From 1.4.6 (including) to 1.4.6* (excluding)
  • AccessPress Themes Testimonial WordPress Plugin – AP Custom Testimonial — From 1.4.7 (including) to 1.4.7 (excluding)
  • AccessPress Themes Mega Menu Plugin for WordPress – AP Mega Menu — From 3.0.5 (including) to 3.0.5* (excluding)
  • AccessPress Themes Mega Menu Plugin for WordPress – AP Mega Menu — From 3.0.6 (including) to 3.0.6 (excluding)
  • AccessPress Themes Pricing Table Builder – AP Pricing Tables Lite — From 1.1.3 (including) to 1.1.3* (excluding)
  • AccessPress Themes Responsive Notification Bar Plugin for WordPress – Apex Notification Bar Lite — From 2.0.4 (including) to 2.0.4* (excluding)
  • AccessPress Themes Responsive Notification Bar Plugin for WordPress – Apex Notification Bar Lite — From 2.0.5 (including) to 2.0.5 (excluding)
  • AccessPress Themes Form Store to DB — From 1.0.9 (including) to 1.0.9* (excluding)
  • AccessPress Themes Form Store to DB — From 1.1.0 (including) to 1.1.0 (excluding)
  • AccessPress Themes Comments Disable – AccessPress — From 1.0.7 (including) to 1.0.7* (excluding)
  • AccessPress Themes Comments Disable – AccessPress — From 1.0.8 (including) to 1.0.8 (excluding)
  • AccessPress Themes CTA plugin for WordPress – Easy Side Tab — From 1.0.7 (including) to 1.0.7* (excluding)
  • AccessPress Themes CTA plugin for WordPress – Easy Side Tab — From 1.0.8 (including) to 1.0.8 (excluding)
  • AccessPress Themes WordPress Backend Customizer – Everest Admin Theme Lite — From 1.0.7 (including) to 1.0.7* (excluding)
  • AccessPress Themes WordPress Backend Customizer – Everest Admin Theme Lite — From 1.0.8 (including) to 1.0.8 (excluding)
  • AccessPress Themes Ultimate Coming Soon, Maintenance Mode Plugin for WordPress – Everest Coming Soon Lite — From 1.1.0 (including) to 1.1.0* (excluding)
  • AccessPress Themes Ultimate Coming Soon, Maintenance Mode Plugin for WordPress – Everest Coming Soon Lite — From 1.1.1 (including) to 1.1.1 (excluding)
  • AccessPress Themes Free WordPress Plugin To Display Like/Dislike Comment Rating – Everest Comment Rating Lite — From 2.0.4 (including) to 2.0.4* (excluding)
  • AccessPress Themes Free WordPress Plugin To Display Like/Dislike Comment Rating – Everest Comment Rating Lite — From 2.0.5 (including) to 2.0.5 (excluding)
  • AccessPress Themes Beautiful Stat Counter Plugin for WordPress – Everest Counter Lite — From 2.0.7 (including) to 2.0.7* (excluding)
  • AccessPress Themes Beautiful Stat Counter Plugin for WordPress – Everest Counter Lite — From 2.0.8 (including) to 2.0.8 (excluding)
  • AccessPress Themes Beautiful FAQ Plugin for WordPress – Everest FAQ Manager Lite — From 1.0.8 (including) to 1.0.8* (excluding)
  • AccessPress Themes Beautiful FAQ Plugin for WordPress – Everest FAQ Manager Lite — From 1.0.9 (including) to 1.0.9 (excluding)
  • AccessPress Themes Responsive Media Gallery Plugin for WordPress – Everest Gallery Lite — From 1.0.8 (including) to 1.0.8* (excluding)
  • AccessPress Themes Responsive Media Gallery Plugin for WordPress – Everest Gallery Lite — From 1.0.9 (including) to 1.0.9 (excluding)
  • AccessPress Themes Everest GPlaces Business Reviews — From 1.0.9 (including) to 1.0.9* (excluding)
  • AccessPress Themes Everest GPlaces Business Reviews — From 2.0.0 (including) to 2.0.0 (excluding)
  • AccessPress Themes Everest Review Lite – User/Admin review plugin for WordPress — Version 1.0.7
  • AccessPress Themes Free Responsive Tab Plugin For WordPress – Everest Tab Lite — From 2.0.3 (including) to 2.0.3* (excluding)
  • AccessPress Themes Free Responsive Tab Plugin For WordPress – Everest Tab Lite — From 2.0.4 (including) to 2.0.4 (excluding)
  • AccessPress Themes Responsive WordPress Timeline Plugin – Everest Timeline Lite — From 1.1.1 (including) to 1.1.1* (excluding)
  • AccessPress Themes Responsive WordPress Timeline Plugin – Everest Timeline Lite — From 1.1.2 (including) to 1.1.2 (excluding)
  • AccessPress Themes Inline Call To Action Builder Lite – Free Call To Action Layer Plugin for WordPress — From 1.1.0 (including) to 1.1.0* (excluding)
  • AccessPress Themes Inline Call To Action Builder Lite – Free Call To Action Layer Plugin for WordPress — From 1.1.1 (including) to 1.1.1 (excluding)
  • AccessPress Themes Product Slider For WooCommerce Lite — From 1.1.5 (including) to 1.1.5* (excluding)
  • AccessPress Themes Product Slider For WooCommerce Lite — From 1.1.6 (including) to 1.1.6 (excluding)
  • AccessPress Themes Responsive Clients Logo Gallery Plugin for WordPress – Smart Logo Showcase Lite — From 1.1.7 (including) to 1.1.7* (excluding)
  • AccessPress Themes Responsive Clients Logo Gallery Plugin for WordPress – Smart Logo Showcase Lite — From 1.1.8 (including) to 1.1.8 (excluding)
  • AccessPress Themes Smart Scroll Posts for WordPress — From 2.0.8 (including) to 2.0.8* (excluding)
  • AccessPress Themes Smart Scroll Posts for WordPress — From 2.0.9 (including) to 2.0.9 (excluding)
  • AccessPress Themes Faster and Easier scroll to Top Plugin for WordPress – Smart Scroll to Top Lite — From 1.0.3 (including) to 1.0.3* (excluding)
  • AccessPress Themes Faster and Easier scroll to Top Plugin for WordPress – Smart Scroll to Top Lite — From 1.0.4 (including) to 1.0.4 (excluding)
  • AccessPress Themes Total GDPR Compliance Lite – WordPress Plugin for GDPR Compatibility — Version 1.0.4
  • AccessPress Themes Total Team Lite – Responsive Team Manager / Showcase Plugin for WordPress — From 1.1.1 (including) to 1.1.1* (excluding)
  • AccessPress Themes Total Team Lite – Responsive Team Manager / Showcase Plugin for WordPress — From 1.1.2 (including) to 1.1.2 (excluding)
  • AccessPress Themes Free Responsive Post/Article Author Section Plugin for WordPress – Ultimate Author Box Lite — From 1.1.2 (including) to 1.1.2* (excluding)
  • AccessPress Themes Free Responsive Post/Article Author Section Plugin for WordPress – Ultimate Author Box Lite — From 1.1.3 (including) to 1.1.3 (excluding)
  • AccessPress Themes Contact Form for WordPress – Ultimate Form Builder Lite — From 1.5.0 (including) to 1.5.0* (excluding)
  • AccessPress Themes Contact Form for WordPress – Ultimate Form Builder Lite — From 1.5.1 (including) to 1.5.1 (excluding)
  • AccessPress Themes Badge Designer Lite For WooCommerce — From 1.1.0 (including) to 1.1.0* (excluding)
  • AccessPress Themes Badge Designer Lite For WooCommerce — From 1.1.1 (including) to 1.1.1 (excluding)
  • AccessPress Themes WordPress Slider Plugin – WP 1 Slider — From 1.2.9 (including) to 1.2.9* (excluding)
  • AccessPress Themes WordPress Slider Plugin – WP 1 Slider — From 1.3.0 (including) to 1.3.0 (excluding)
  • AccessPress Themes Plugin to Manage / Design WordPress Blog – WP Blog Manager Lite — From 1.1.1 (including) to 1.1.1* (excluding)
  • AccessPress Themes Plugin to Manage / Design WordPress Blog – WP Blog Manager Lite — From 1.1.2 (including) to 1.1.2 (excluding)
  • AccessPress Themes Smartest Way To Design & Customize WordPress Comments & Comment Form – WP Comment Designer Lite — From 2.0.3 (including) to 2.0.3* (excluding)
  • AccessPress Themes Smartest Way To Design & Customize WordPress Comments & Comment Form – WP Comment Designer Lite — From 2.0.4 (including) to 2.0.4 (excluding)
  • AccessPress Themes Cookie Notification Plugin for WordPress – WP Cookie User Info — From 1.0.7 (including) to 1.0.7* (excluding)
  • AccessPress Themes Cookie Notification Plugin for WordPress – WP Cookie User Info — From 1.0.8 (including) to 1.0.8 (excluding)
  • AccessPress Themes Social Review — From 1.0.9 (including) to 1.0.9 (excluding)
  • AccessPress Themes MContact Button — From 2.0.7 (including) to 2.0.7 (excluding)
  • AccessPress Themes WP Floating Menu – One page navigator, sticky menu for WordPress — From 1.4.4 (including) to 1.4.4* (excluding)
  • AccessPress Themes WP Floating Menu – One page navigator, sticky menu for WordPress — From 1.4.5 (including) to 1.4.5 (excluding)
  • AccessPress Themes The Easiest WordPress Media Manager Plugin – WP Media Manager Lite — From 1.1.2 (including) to 1.1.2* (excluding)
  • AccessPress Themes The Easiest WordPress Media Manager Plugin – WP Media Manager Lite — From 1.1.3 (including) to 1.1.3 (excluding)
  • AccessPress Themes WP Popup Banners — From 1.2.3 (including) to 1.2.3* (excluding)
  • AccessPress Themes WP Popup Banners — From 1.2.4 (including) to 1.2.4 (excluding)
  • AccessPress Themes WP Popup Lite – Responsive popup plugin for WordPress — Version 1.0.8
  • AccessPress Themes Responsive Products Showcase Listing for WordPress – WP Product Gallery Lite — Version 1.1.1
  • AccessPress Themes accessbuddy — Version 1.0.0
  • AccessPress Themes Accesspress Basic — Version 3.2.1
  • AccessPress Themes Accesspress Lite — Version 2.92
  • AccessPress Themes Accesspress Mag — Version 2.6.5
  • AccessPress Themes AccessPress Parallax — Version 4.5
  • AccessPress Themes accesspress-ray — Version 1.19.5
  • AccessPress Themes AccessPress Root — Version 2.5
  • AccessPress Themes AccessPress Staple — Version 1.9.1
  • AccessPress Themes AccessPress Store — Version 2.4.9
  • AccessPress Themes Agency Lite — Version 1.1.6
  • AccessPress Themes Aplite — Version 1.0.6
  • AccessPress Themes Bingle — Version 1.0.4
  • AccessPress Themes Bloger — Version 1.2.6
  • AccessPress Themes Construction Lite — Version 1.2.5
  • AccessPress Themes Doko — Version 1.0.27
  • AccessPress Themes Enlighten — Version 1.3.5
  • AccessPress Themes FashStore — Version 1.2.1
  • AccessPress Themes FotoGraphy — Version 2.4.0
  • AccessPress Themes Gaga Corp — Version 1.0.8
  • AccessPress Themes Gaga Lite — Version 1.4.2 1.0.8
  • AccessPress Themes One Paze — Version 2.2.8
  • AccessPress Themes parallax-blog — Version 3.1.1574941215
  • AccessPress Themes ParallaxSome — Version 1.3.6
  • AccessPress Themes Punte — Version 1.1.2
  • AccessPress Themes Revolve — Version 1.3.1
  • AccessPress Themes Ripple — Version 1.2.0
  • AccessPress Themes ScrollMe — Version 2.1.0
  • AccessPress Themes SportsMag — Version 1.2.1
  • AccessPress Themes StoreVilla — Version 1.4.1
  • AccessPress Themes Swing Lite — Version 1.1.9
  • AccessPress Themes The Launcher — Version 1.3.2
  • AccessPress Themes The Monday — Version 1.4.1
  • AccessPress Themes Uncode Lite — Version 1.3.1
  • AccessPress Themes Unicon Lite — Version 1.2.6
  • AccessPress Themes VMag — Version 1.2.7
  • AccessPress Themes VMagazine Lite — Version 1.3.5
  • AccessPress Themes Vmagazine News — Version 1.0.5
  • AccessPress Themes Zigcy Baby — Version 1.0.6
  • AccessPress Themes Zigcy Cosmetics — Version 1.0.5
  • AccessPress Themes Zigcy Lite — Version 2.0.9
  • accesspressthemes accessbuddy — Version 1.0.0
  • accesspressthemes accesspress_anonymous_post — Version 2.8.0
  • accesspressthemes accesspress_basic — Version 3.2.1
  • accesspressthemes accesspress_custom_css — Version 2.0.1
  • accesspressthemes accesspress_custom_post_type — Version 1.0.8
  • accesspressthemes accesspress_ifeeds — Version 4.0.3
  • accesspressthemes accesspress_lite — Version 2.92
  • accesspressthemes accesspress_mag — Version 2.6.5
  • accesspressthemes accesspress_parallax — Version 4.5
  • accesspressthemes accesspress_ray — Version 1.19.5
  • accesspressthemes accesspress_root — Version 2.5
  • accesspressthemes accesspress_social_counter — Version 1.9.1
  • accesspressthemes accesspress_social_icons — Version 1.8.2
  • accesspressthemes accesspress_social_login_lite — Version 3.4.7
  • accesspressthemes accesspress_social_share — Version 4.5.5
  • accesspressthemes accesspress_staple — Version 1.9.1
  • accesspressthemes accesspress_store — Version 2.4.9
  • accesspressthemes agency_lite — Version 1.1.6
  • accesspressthemes ap_companion — Before 1.0.7
  • accesspressthemes ap_contact_form — Version 1.0.6
  • accesspressthemes ap_custom_testimonial — Version 1.4.6
  • accesspressthemes ap_mega_menu — Version 3.0.5
  • accesspressthemes ap_pricing_tables_lite — Version 1.1.2
  • accesspressthemes apex_notification_bar_lite — Version 2.0.4
  • accesspressthemes aplite — Version 1.0.6
  • accesspressthemes badge_designer_lite_for_woocommerce — Version 1.1.0
  • accesspressthemes bingle — Version 1.0.4
  • accesspressthemes bloger — Version 1.2.6
  • accesspressthemes comments_disable_-_accesspress — Version 1.0.7
  • accesspressthemes construction_lite — Version 1.2.5
  • accesspressthemes doko — Version 1.0.27
  • accesspressthemes easy_side_tab — Version 1.0.7
  • accesspressthemes enlighten — Version 1.3.5
  • accesspressthemes everest_admin_theme_lite — Version 1.0.7
  • accesspressthemes everest_coming_soon_lite — Version 1.1.0
  • accesspressthemes everest_comment_rating_lite — Version 2.0.4
  • accesspressthemes everest_counter_lite — Version 2.0.7
  • accesspressthemes everest_faq_manager_lite — Version 1.0.8
  • accesspressthemes everest_gallery_lite — Version 1.0.8
  • accesspressthemes everest_gplaces_business_reviews — Version 1.0.9
  • accesspressthemes everest_review_lite — Version 1.0.7
  • accesspressthemes everest_tab_lite — Version 2.0.3
  • accesspressthemes everest_timeline_lite — Version 1.1.1
  • accesspressthemes fashstore — Version 1.2.1
  • accesspressthemes form_store_to_db — Version 1.0.9
  • accesspressthemes fotography — Version 2.4.0
  • accesspressthemes gaga_corp — Version 1.0.8
  • accesspressthemes gaga_lite — Version 1.4.2
  • accesspressthemes inline_call_to_action_builder_lite — Version 1.1.0
  • accesspressthemes mcontact_button — Before 2.0.7
  • accesspressthemes one-paze — Version 2.2.8
  • accesspressthemes parallax_blog — Version 3.1.1574941215
  • accesspressthemes parallaxsome — Version 1.3.6
  • accesspressthemes pi_button — Version 3.3.3
  • accesspressthemes product_slider_for_woocommerce_lite — Version 1.1.5
  • accesspressthemes punte — Version 1.1.2
  • accesspressthemes revolve — Version 1.3.1
  • accesspressthemes ripple — Version 1.2.0
  • accesspressthemes scrollme — Version 2.1.0
  • accesspressthemes smart_logo_showcase_lite — Version 1.1.7
  • accesspressthemes smart_scroll_posts — Version 2.0.8
  • accesspressthemes smart_scroll_to_top_lite — Version 1.0.3
  • accesspressthemes social_auto_poster — Version 2.1.3
  • accesspressthemes social_review — Before 1.0.9
  • accesspressthemes sportsmag — Version 1.2.1
  • accesspressthemes storevilla — Version 1.4.1
  • accesspressthemes swing_lite — Version 1.1.9
  • accesspressthemes tauto_poster — Version 1.4.5
  • accesspressthemes the_launcher — Version 1.3.2
  • accesspressthemes the_monday — Version 1.4.1
  • accesspressthemes total_gdpr_compliance_lite — Version 1.0.4
  • accesspressthemes total_team_lite — Version 1.1.1
  • accesspressthemes ultimate-form-builder-lite — Version 1.5.0
  • accesspressthemes ultimate_author_box_lite — Version 1.1.2
  • accesspressthemes uncode_lite — Version 1.3.1
  • accesspressthemes unicon_lite — Version 1.2.6
  • accesspressthemes vmag — Version 1.2.7
  • accesspressthemes vmagazine_lite — Version 1.3.5
  • accesspressthemes vmagazine_news — Version 1.0.5
  • accesspressthemes wp_1_slider — Version 1.2.9
  • accesspressthemes wp_blog_manager_lite — Version 1.1.0
  • accesspressthemes wp_comment_designer_lite — Version 2.0.3
  • accesspressthemes wp_cookie_user_info — Version 1.0.7
  • accesspressthemes wp_floating_menu — Version 1.4.4
  • accesspressthemes wp_media_manager_lite — Version 1.1.2
  • accesspressthemes wp_menu_icons_lite — Before 1.0.9
  • accesspressthemes wp_popup_banners — Version 1.2.3
  • accesspressthemes wp_popup_lite — Version 1.0.8
  • accesspressthemes wp_product_gallery_lite — Version 1.1.1
  • accesspressthemes wp_tfeed — Version 1.6.7
  • accesspressthemes zigcy_baby — Version 1.0.6
  • accesspressthemes zigcy_cosmetics — Version 1.0.5
  • accesspressthemes zigcy_lite — Version 2.0.9

References

  • jetpack.com https://jetpack.com/2022/01/18/backdoor-found-in-themes-and-plugins-from-accesspress-themes/ Exploit, Third Party Advisory
  • wpscan.com https://wpscan.com/vulnerability/9c76bada-fa32-4c2f-9855-d0efd1e63eff Exploit, Third Party Advisory
  • nvd.nist.gov Official NVD record