CVE-2021-24867
Critical
Description
Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusion
SeverityCritical
CVSS9.8
Exploit probability—
Product
Accesspressthemes Accesspress Anonymous Post
PublishedFeb 21, 2022
First seenFeb 21, 2022
Weakness typeCWE-912CWE-912
How to fix
Update
- accesspressthemes ap_companion1.0.7 or later
- accesspressthemes mcontact_button2.0.7 or later
- accesspressthemes social_review1.0.9 or later
- accesspressthemes wp_menu_icons_lite1.0.9 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| accesspressthemes accesspress_anonymous_post | 2.8.0 | — |
| accesspressthemes accessbuddy | 1.0.0 | — |
| accesspressthemes accesspress_basic | 3.2.1 | — |
| accesspressthemes accesspress_custom_css | 2.0.1 | — |
| accesspressthemes accesspress_custom_post_type | 1.0.8 | — |
| accesspressthemes accesspress_ifeeds | 4.0.3 | — |
| accesspressthemes accesspress_lite | 2.92 | — |
| accesspressthemes accesspress_mag | 2.6.5 | — |
| accesspressthemes accesspress_parallax | 4.5 | — |
| accesspressthemes accesspress_ray | 1.19.5 | — |
| accesspressthemes accesspress_root | 2.5 | — |
| accesspressthemes accesspress_social_counter | 1.9.1 | — |
| accesspressthemes accesspress_social_icons | 1.8.2 | — |
| accesspressthemes accesspress_social_login_lite | 3.4.7 | — |
| accesspressthemes accesspress_social_share | 4.5.5 | — |
| accesspressthemes accesspress_staple | 1.9.1 | — |
| accesspressthemes accesspress_store | 2.4.9 | — |
| accesspressthemes agency_lite | 1.1.6 | — |
| accesspressthemes ap_companion | v < 1.0.7 | 1.0.7 |
| accesspressthemes ap_contact_form | 1.0.6 | — |
| accesspressthemes ap_custom_testimonial | 1.4.6 | — |
| accesspressthemes ap_mega_menu | 3.0.5 | — |
| accesspressthemes ap_pricing_tables_lite | 1.1.2 | — |
| accesspressthemes apex_notification_bar_lite | 2.0.4 | — |
| accesspressthemes aplite | 1.0.6 | — |
| accesspressthemes badge_designer_lite_for_woocommerce | 1.1.0 | — |
| accesspressthemes bingle | 1.0.4 | — |
| accesspressthemes bloger | 1.2.6 | — |
| accesspressthemes comments_disable_-_accesspress | 1.0.7 | — |
| accesspressthemes construction_lite | 1.2.5 | — |
| accesspressthemes doko | 1.0.27 | — |
| accesspressthemes easy_side_tab | 1.0.7 | — |
| accesspressthemes enlighten | 1.3.5 | — |
| accesspressthemes everest_admin_theme_lite | 1.0.7 | — |
| accesspressthemes everest_coming_soon_lite | 1.1.0 | — |
| accesspressthemes everest_comment_rating_lite | 2.0.4 | — |
| accesspressthemes everest_counter_lite | 2.0.7 | — |
| accesspressthemes everest_faq_manager_lite | 1.0.8 | — |
| accesspressthemes everest_gallery_lite | 1.0.8 | — |
| accesspressthemes everest_gplaces_business_reviews | 1.0.9 | — |
| accesspressthemes everest_review_lite | 1.0.7 | — |
| accesspressthemes everest_tab_lite | 2.0.3 | — |
| accesspressthemes everest_timeline_lite | 1.1.1 | — |
| accesspressthemes fashstore | 1.2.1 | — |
| accesspressthemes form_store_to_db | 1.0.9 | — |
| accesspressthemes fotography | 2.4.0 | — |
| accesspressthemes gaga_corp | 1.0.8 | — |
| accesspressthemes gaga_lite | 1.4.2 | — |
| accesspressthemes inline_call_to_action_builder_lite | 1.1.0 | — |
| accesspressthemes mcontact_button | v < 2.0.7 | 2.0.7 |
| accesspressthemes one-paze | 2.2.8 | — |
| accesspressthemes parallax_blog | 3.1.1574941215 | — |
| accesspressthemes parallaxsome | 1.3.6 | — |
| accesspressthemes pi_button | 3.3.3 | — |
| accesspressthemes product_slider_for_woocommerce_lite | 1.1.5 | — |
| accesspressthemes punte | 1.1.2 | — |
| accesspressthemes revolve | 1.3.1 | — |
| accesspressthemes ripple | 1.2.0 | — |
| accesspressthemes scrollme | 2.1.0 | — |
| accesspressthemes smart_logo_showcase_lite | 1.1.7 | — |
| accesspressthemes smart_scroll_posts | 2.0.8 | — |
| accesspressthemes smart_scroll_to_top_lite | 1.0.3 | — |
| accesspressthemes social_auto_poster | 2.1.3 | — |
| accesspressthemes social_review | v < 1.0.9 | 1.0.9 |
| accesspressthemes sportsmag | 1.2.1 | — |
| accesspressthemes storevilla | 1.4.1 | — |
| accesspressthemes swing_lite | 1.1.9 | — |
| accesspressthemes tauto_poster | 1.4.5 | — |
| accesspressthemes the_launcher | 1.3.2 | — |
| accesspressthemes the_monday | 1.4.1 | — |
| accesspressthemes total_gdpr_compliance_lite | 1.0.4 | — |
| accesspressthemes total_team_lite | 1.1.1 | — |
| accesspressthemes ultimate-form-builder-lite | 1.5.0 | — |
| accesspressthemes ultimate_author_box_lite | 1.1.2 | — |
| accesspressthemes uncode_lite | 1.3.1 | — |
| accesspressthemes unicon_lite | 1.2.6 | — |
| accesspressthemes vmag | 1.2.7 | — |
| accesspressthemes vmagazine_lite | 1.3.5 | — |
| accesspressthemes vmagazine_news | 1.0.5 | — |
| accesspressthemes wp_1_slider | 1.2.9 | — |
| accesspressthemes wp_blog_manager_lite | 1.1.0 | — |
| accesspressthemes wp_comment_designer_lite | 2.0.3 | — |
| accesspressthemes wp_cookie_user_info | 1.0.7 | — |
| accesspressthemes wp_floating_menu | 1.4.4 | — |
| accesspressthemes wp_media_manager_lite | 1.1.2 | — |
| accesspressthemes wp_menu_icons_lite | v < 1.0.9 | 1.0.9 |
| accesspressthemes wp_popup_banners | 1.2.3 | — |
| accesspressthemes wp_popup_lite | 1.0.8 | — |
| accesspressthemes wp_product_gallery_lite | 1.1.1 | — |
| accesspressthemes wp_tfeed | 1.6.7 | — |
| accesspressthemes zigcy_baby | 1.0.6 | — |
| accesspressthemes zigcy_cosmetics | 1.0.5 | — |
| accesspressthemes zigcy_lite | 2.0.9 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.