CVE-2021-24867

Backdoored Plugins & Themes from AccessPress Themes

State
Published
Severity
Not scored
Published
Feb 21, 2022
Updated
Aug 3, 2024
Reserved
Jan 14, 2021

Read the record on cve.org

Description

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusion

Scores

The record has no CVSS score.

Weaknesses

Affected Products

ProductVersions
Frontend Post WordPress Plugin – AccessPress Anonymous PostAccessPress Themes
  • 2.8.0 to before 2.8.0*Affected
  • 2.8.1 to before 2.8.1Affected
AccessPress Custom CSSAccessPress Themes
  • 2.0.1 to before 2.0.1*Affected
  • 2.0.2 to before 2.0.2Affected
AccessPress Custom Post TypeAccessPress Themes
  • 1.0.8 to before 1.0.8*Affected
  • 1.0.9 to before 1.0.9Affected
Social Auto PosterAccessPress Themes
  • 2.1.3 to before 2.1.3*Affected
  • 2.1.4 to before 2.1.4Affected
AccessPress iFeedsAccessPress Themes
  • 4.0.3 to before 4.0.3*Affected
  • 4.0.4 to before 4.0.4Affected
PI ButtonAccessPress Themes
  • 3.3.3 to before 3.3.3*Affected
  • 3.3.4 to before 3.3.4Affected
AccessPress Social CounterAccessPress Themes
  • 1.9.1 to before 1.9.1*Affected
  • 1.9.2 to before 1.9.2Affected
AccessPress Social IconsAccessPress Themes
  • 1.8.2 to before 1.8.2*Affected
  • 1.8.3 to before 1.8.3Affected
AccessPress Social Login Lite – Social Login WordPress PluginAccessPress Themes
  • 3.4.7 to before 3.4.7*Affected
  • 3.4.8 to before 3.4.8Affected
AccessPress Social ShareAccessPress Themes
  • 4.5.5 to before 4.5.5*Affected
  • 4.5.6 to before 4.5.6Affected
TAuto PosterAccessPress Themes
  • 1.4.5 to before 1.4.5*Affected
  • 1.4.6 to before 1.4.6Affected
WP TFeedAccessPress Themes
  • 1.6.7 to before 1.6.7*Affected
  • 1.6.8 to before 1.6.8Affected
Effectively Add & Customize Free Icons For WordPress Menus – WP Menu Icons LiteAccessPress Themes
  • 1.0.9 to before 1.0.9Affected
AP CompanionAccessPress Themes
  • 1.0.7 to before 1.0.7Affected
Easiest Contact Form for WordPress – AP Contact FormAccessPress Themes
  • 1.0.6 to before 1.0.6*Affected
  • 1.0.7 to before 1.0.7Affected
Testimonial WordPress Plugin – AP Custom TestimonialAccessPress Themes
  • 1.4.6 to before 1.4.6*Affected
  • 1.4.7 to before 1.4.7Affected
Mega Menu Plugin for WordPress – AP Mega MenuAccessPress Themes
  • 3.0.5 to before 3.0.5*Affected
  • 3.0.6 to before 3.0.6Affected
Pricing Table Builder – AP Pricing Tables LiteAccessPress Themes
  • 1.1.3 to before 1.1.3*Affectedfrom 1.1.3Not affected
Responsive Notification Bar Plugin for WordPress – Apex Notification Bar LiteAccessPress Themes
  • 2.0.4 to before 2.0.4*Affected
  • 2.0.5 to before 2.0.5Affected
Form Store to DBAccessPress Themes
  • 1.0.9 to before 1.0.9*Affected
  • 1.1.0 to before 1.1.0Affected
Comments Disable – AccessPressAccessPress Themes
  • 1.0.7 to before 1.0.7*Affected
  • 1.0.8 to before 1.0.8Affected
CTA plugin for WordPress – Easy Side TabAccessPress Themes
  • 1.0.7 to before 1.0.7*Affected
  • 1.0.8 to before 1.0.8Affected
WordPress Backend Customizer – Everest Admin Theme LiteAccessPress Themes
  • 1.0.7 to before 1.0.7*Affected
  • 1.0.8 to before 1.0.8Affected
Ultimate Coming Soon, Maintenance Mode Plugin for WordPress – Everest Coming Soon LiteAccessPress Themes
  • 1.1.0 to before 1.1.0*Affected
  • 1.1.1 to before 1.1.1Affected
Free WordPress Plugin To Display Like/Dislike Comment Rating – Everest Comment Rating LiteAccessPress Themes
  • 2.0.4 to before 2.0.4*Affected
  • 2.0.5 to before 2.0.5Affected
Beautiful Stat Counter Plugin for WordPress – Everest Counter LiteAccessPress Themes
  • 2.0.7 to before 2.0.7*Affected
  • 2.0.8 to before 2.0.8Affected
Beautiful FAQ Plugin for WordPress – Everest FAQ Manager LiteAccessPress Themes
  • 1.0.8 to before 1.0.8*Affected
  • 1.0.9 to before 1.0.9Affected
Responsive Media Gallery Plugin for WordPress – Everest Gallery LiteAccessPress Themes
  • 1.0.8 to before 1.0.8*Affected
  • 1.0.9 to before 1.0.9Affected
Everest GPlaces Business ReviewsAccessPress Themes
  • 1.0.9 to before 1.0.9*Affected
  • 2.0.0 to before 2.0.0Affected
Everest Review Lite – User/Admin review plugin for WordPressAccessPress Themes
  • 1.0.7Affected
Free Responsive Tab Plugin For WordPress – Everest Tab LiteAccessPress Themes
  • 2.0.3 to before 2.0.3*Affected
  • 2.0.4 to before 2.0.4Affected
Responsive WordPress Timeline Plugin – Everest Timeline LiteAccessPress Themes
  • 1.1.1 to before 1.1.1*Affected
  • 1.1.2 to before 1.1.2Affected
Inline Call To Action Builder Lite – Free Call To Action Layer Plugin for WordPressAccessPress Themes
  • 1.1.0 to before 1.1.0*Affected
  • 1.1.1 to before 1.1.1Affected
Product Slider For WooCommerce LiteAccessPress Themes
  • 1.1.5 to before 1.1.5*Affected
  • 1.1.6 to before 1.1.6Affected
Responsive Clients Logo Gallery Plugin for WordPress – Smart Logo Showcase LiteAccessPress Themes
  • 1.1.7 to before 1.1.7*Affected
  • 1.1.8 to before 1.1.8Affected
Smart Scroll Posts for WordPressAccessPress Themes
  • 2.0.8 to before 2.0.8*Affected
  • 2.0.9 to before 2.0.9Affected
Faster and Easier scroll to Top Plugin for WordPress – Smart Scroll to Top LiteAccessPress Themes
  • 1.0.3 to before 1.0.3*Affected
  • 1.0.4 to before 1.0.4Affected
Total GDPR Compliance Lite – WordPress Plugin for GDPR CompatibilityAccessPress Themes
  • 1.0.4Affected
Total Team Lite – Responsive Team Manager / Showcase Plugin for WordPressAccessPress Themes
  • 1.1.1 to before 1.1.1*Affected
  • 1.1.2 to before 1.1.2Affected
Free Responsive Post/Article Author Section Plugin for WordPress – Ultimate Author Box LiteAccessPress Themes
  • 1.1.2 to before 1.1.2*Affected
  • 1.1.3 to before 1.1.3Affected
Contact Form for WordPress – Ultimate Form Builder LiteAccessPress Themes
  • 1.5.0 to before 1.5.0*Affected
  • 1.5.1 to before 1.5.1Affected
Badge Designer Lite For WooCommerceAccessPress Themes
  • 1.1.0 to before 1.1.0*Affected
  • 1.1.1 to before 1.1.1Affected
WordPress Slider Plugin – WP 1 SliderAccessPress Themes
  • 1.2.9 to before 1.2.9*Affected
  • 1.3.0 to before 1.3.0Affected
Plugin to Manage / Design WordPress Blog – WP Blog Manager LiteAccessPress Themes
  • 1.1.1 to before 1.1.1*Affected
  • 1.1.2 to before 1.1.2Affected
Smartest Way To Design & Customize WordPress Comments & Comment Form – WP Comment Designer LiteAccessPress Themes
  • 2.0.3 to before 2.0.3*Affected
  • 2.0.4 to before 2.0.4Affected
Cookie Notification Plugin for WordPress – WP Cookie User InfoAccessPress Themes
  • 1.0.7 to before 1.0.7*Affected
  • 1.0.8 to before 1.0.8Affected
Social ReviewAccessPress Themes
  • 1.0.9 to before 1.0.9Affected
MContact ButtonAccessPress Themes
  • 2.0.7 to before 2.0.7Affected
WP Floating Menu – One page navigator, sticky menu for WordPressAccessPress Themes
  • 1.4.4 to before 1.4.4*Affected
  • 1.4.5 to before 1.4.5Affected
The Easiest WordPress Media Manager Plugin – WP Media Manager LiteAccessPress Themes
  • 1.1.2 to before 1.1.2*Affected
  • 1.1.3 to before 1.1.3Affected
WP Popup BannersAccessPress Themes
  • 1.2.3 to before 1.2.3*Affected
  • 1.2.4 to before 1.2.4Affected
WP Popup Lite – Responsive popup plugin for WordPressAccessPress Themes
  • 1.0.8Affected
Responsive Products Showcase Listing for WordPress – WP Product Gallery LiteAccessPress Themes
  • 1.1.1Affected
accessbuddyAccessPress Themes
  • 1.0.0Affected
Accesspress BasicAccessPress Themes
  • 3.2.1Affected
Accesspress LiteAccessPress Themes
  • 2.92Affected
Accesspress MagAccessPress Themes
  • 2.6.5Affected
AccessPress ParallaxAccessPress Themes
  • 4.5Affected
accesspress-rayAccessPress Themes
  • 1.19.5Affected
AccessPress RootAccessPress Themes
  • 2.5Affected
AccessPress StapleAccessPress Themes
  • 1.9.1Affected
AccessPress StoreAccessPress Themes
  • 2.4.9Affected
Agency LiteAccessPress Themes
  • 1.1.6Affected
ApliteAccessPress Themes
  • 1.0.6Affected
BingleAccessPress Themes
  • 1.0.4Affected
BlogerAccessPress Themes
  • 1.2.6Affected
Construction LiteAccessPress Themes
  • 1.2.5Affected
DokoAccessPress Themes
  • 1.0.27Affected
EnlightenAccessPress Themes
  • 1.3.5Affected
FashStoreAccessPress Themes
  • 1.2.1Affected
FotoGraphyAccessPress Themes
  • 2.4.0Affected
Gaga CorpAccessPress Themes
  • 1.0.8Affected
Gaga LiteAccessPress Themes
  • 1.4.2 1.0.8Affected
One PazeAccessPress Themes
  • 2.2.8Affected
parallax-blogAccessPress Themes
  • 3.1.1574941215Affected
ParallaxSomeAccessPress Themes
  • 1.3.6Affected
PunteAccessPress Themes
  • 1.1.2Affected
RevolveAccessPress Themes
  • 1.3.1Affected
RippleAccessPress Themes
  • 1.2.0Affected
ScrollMeAccessPress Themes
  • 2.1.0Affected
SportsMagAccessPress Themes
  • 1.2.1Affected
StoreVillaAccessPress Themes
  • 1.4.1Affected
Swing LiteAccessPress Themes
  • 1.1.9Affected
The LauncherAccessPress Themes
  • 1.3.2Affected
The MondayAccessPress Themes
  • 1.4.1Affected
Uncode LiteAccessPress Themes
  • 1.3.1Affected
Unicon LiteAccessPress Themes
  • 1.2.6Affected
VMagAccessPress Themes
  • 1.2.7Affected
VMagazine LiteAccessPress Themes
  • 1.3.5Affected
Vmagazine NewsAccessPress Themes
  • 1.0.5Affected
Zigcy BabyAccessPress Themes
  • 1.0.6Affected
Zigcy CosmeticsAccessPress Themes
  • 1.0.5Affected
Zigcy LiteAccessPress Themes
  • 2.0.9Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.