# Backdoored Plugins & Themes from AccessPress Themes CVE record · `CVE-2021-24867` - **Identifiers:** `CVE-2021-24867` - **State:** Confirmed - **Severity:** No CVSS score - **Critical:** No - **CNA:** WPScan - **Weakness (CWE):** [CWE-912](https://cwe.mitre.org/data/definitions/912.html) - **Tags:** [CWE-912](https://agentprime.io/advisories/tag/cwe-912.md) - **Technologies:** [AccessPress Themes Frontend Post WordPress Plugin – AccessPress Anonymous Post](https://agentprime.io/advisories/technology/accesspress-themes-frontend-post-wordpress-plugin-accesspress-anonymous-post.md) · [AccessPress Themes AccessPress Custom CSS](https://agentprime.io/advisories/technology/accesspress-themes-accesspress-custom-css.md) · [AccessPress Themes AccessPress Custom Post Type](https://agentprime.io/advisories/technology/accesspress-themes-accesspress-custom-post-type.md) · [AccessPress Themes Social Auto Poster](https://agentprime.io/advisories/technology/accesspress-themes-social-auto-poster.md) · [AccessPress Themes AccessPress iFeeds](https://agentprime.io/advisories/technology/accesspress-themes-accesspress-ifeeds.md) · [AccessPress Themes PI Button](https://agentprime.io/advisories/technology/accesspress-themes-pi-button.md) · [AccessPress Themes AccessPress Social Counter](https://agentprime.io/advisories/technology/accesspress-themes-accesspress-social-counter.md) · [AccessPress Themes AccessPress Social Icons](https://agentprime.io/advisories/technology/accesspress-themes-accesspress-social-icons.md) · [AccessPress Themes AccessPress Social Login Lite – Social Login WordPress Plugin](https://agentprime.io/advisories/technology/accesspress-themes-accesspress-social-login-lite-social-login-wordpress-plugin.md) · [AccessPress Themes AccessPress Social Share](https://agentprime.io/advisories/technology/accesspress-themes-accesspress-social-share.md) · [AccessPress Themes TAuto Poster](https://agentprime.io/advisories/technology/accesspress-themes-tauto-poster.md) · [AccessPress Themes WP TFeed](https://agentprime.io/advisories/technology/accesspress-themes-wp-tfeed.md) · [AccessPress Themes Effectively Add & Customize Free Icons For WordPress Menus – WP Menu Icons Lite](https://agentprime.io/advisories/technology/accesspress-themes-effectively-add-customize-free-icons-for-wordpress-menus-wp-m.md) · [AccessPress Themes AP Companion](https://agentprime.io/advisories/technology/accesspress-themes-ap-companion.md) · [AccessPress Themes Easiest Contact Form for WordPress – AP Contact Form](https://agentprime.io/advisories/technology/accesspress-themes-easiest-contact-form-for-wordpress-ap-contact-form.md) · [AccessPress Themes Testimonial WordPress Plugin – AP Custom Testimonial](https://agentprime.io/advisories/technology/accesspress-themes-testimonial-wordpress-plugin-ap-custom-testimonial.md) · [AccessPress Themes Mega Menu Plugin for WordPress – AP Mega Menu](https://agentprime.io/advisories/technology/accesspress-themes-mega-menu-plugin-for-wordpress-ap-mega-menu.md) · [AccessPress Themes Pricing Table Builder – AP Pricing Tables Lite](https://agentprime.io/advisories/technology/accesspress-themes-pricing-table-builder-ap-pricing-tables-lite.md) · [AccessPress Themes Responsive Notification Bar Plugin for WordPress – Apex Notification Bar Lite](https://agentprime.io/advisories/technology/accesspress-themes-responsive-notification-bar-plugin-for-wordpress-apex-notific.md) · [AccessPress Themes Form Store to DB](https://agentprime.io/advisories/technology/accesspress-themes-form-store-to-db.md) - **Published:** 21 Feb 2022 - **Updated:** 3 Aug 2024 - **Reviewed by a person:** No Published by the CVE Program (CNA: WPScan) at 21 Feb 2022, 10:45 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. ## Affected products, as the CNA wrote them - Vendor: AccessPress Themes. Product: Frontend Post WordPress Plugin – AccessPress Anonymous Post. - affected: `2.8.0 to before 2.8.0*` (custom) - affected: `2.8.1 to before 2.8.1` (custom) - Vendor: AccessPress Themes. Product: AccessPress Custom CSS. - affected: `2.0.1 to before 2.0.1*` (custom) - affected: `2.0.2 to before 2.0.2` (custom) - Vendor: AccessPress Themes. Product: AccessPress Custom Post Type. - affected: `1.0.8 to before 1.0.8*` (custom) - affected: `1.0.9 to before 1.0.9` (custom) - Vendor: AccessPress Themes. Product: Social Auto Poster. - affected: `2.1.3 to before 2.1.3*` (custom) - affected: `2.1.4 to before 2.1.4` (custom) - Vendor: AccessPress Themes. Product: AccessPress iFeeds. - affected: `4.0.3 to before 4.0.3*` (custom) - affected: `4.0.4 to before 4.0.4` (custom) - Vendor: AccessPress Themes. Product: PI Button. - affected: `3.3.3 to before 3.3.3*` (custom) - affected: `3.3.4 to before 3.3.4` (custom) - Vendor: AccessPress Themes. Product: AccessPress Social Counter. - affected: `1.9.1 to before 1.9.1*` (custom) - affected: `1.9.2 to before 1.9.2` (custom) - Vendor: AccessPress Themes. Product: AccessPress Social Icons. - affected: `1.8.2 to before 1.8.2*` (custom) - affected: `1.8.3 to before 1.8.3` (custom) - Vendor: AccessPress Themes. Product: AccessPress Social Login Lite – Social Login WordPress Plugin. - affected: `3.4.7 to before 3.4.7*` (custom) - affected: `3.4.8 to before 3.4.8` (custom) - Vendor: AccessPress Themes. Product: AccessPress Social Share. - affected: `4.5.5 to before 4.5.5*` (custom) - affected: `4.5.6 to before 4.5.6` (custom) - Vendor: AccessPress Themes. Product: TAuto Poster. - affected: `1.4.5 to before 1.4.5*` (custom) - affected: `1.4.6 to before 1.4.6` (custom) - Vendor: AccessPress Themes. Product: WP TFeed. - affected: `1.6.7 to before 1.6.7*` (custom) - affected: `1.6.8 to before 1.6.8` (custom) - Vendor: AccessPress Themes. Product: Effectively Add & Customize Free Icons For WordPress Menus – WP Menu Icons Lite. - affected: `1.0.9 to before 1.0.9` (custom) - Vendor: AccessPress Themes. Product: AP Companion. - affected: `1.0.7 to before 1.0.7` (custom) - Vendor: AccessPress Themes. Product: Easiest Contact Form for WordPress – AP Contact Form. - affected: `1.0.6 to before 1.0.6*` (custom) - affected: `1.0.7 to before 1.0.7` (custom) - Vendor: AccessPress Themes. Product: Testimonial WordPress Plugin – AP Custom Testimonial. - affected: `1.4.6 to before 1.4.6*` (custom) - affected: `1.4.7 to before 1.4.7` (custom) - Vendor: AccessPress Themes. Product: Mega Menu Plugin for WordPress – AP Mega Menu. - affected: `3.0.5 to before 3.0.5*` (custom) - affected: `3.0.6 to before 3.0.6` (custom) - Vendor: AccessPress Themes. Product: Pricing Table Builder – AP Pricing Tables Lite. - affected: `1.1.3 to before 1.1.3*` (custom) - Vendor: AccessPress Themes. Product: Responsive Notification Bar Plugin for WordPress – Apex Notification Bar Lite. - affected: `2.0.4 to before 2.0.4*` (custom) - affected: `2.0.5 to before 2.0.5` (custom) - Vendor: AccessPress Themes. Product: Form Store to DB. - affected: `1.0.9 to before 1.0.9*` (custom) - affected: `1.1.0 to before 1.1.0` (custom) - Vendor: AccessPress Themes. Product: Comments Disable – AccessPress. - affected: `1.0.7 to before 1.0.7*` (custom) - affected: `1.0.8 to before 1.0.8` (custom) - Vendor: AccessPress Themes. Product: CTA plugin for WordPress – Easy Side Tab. - affected: `1.0.7 to before 1.0.7*` (custom) - affected: `1.0.8 to before 1.0.8` (custom) - Vendor: AccessPress Themes. Product: WordPress Backend Customizer – Everest Admin Theme Lite. - affected: `1.0.7 to before 1.0.7*` (custom) - affected: `1.0.8 to before 1.0.8` (custom) - Vendor: AccessPress Themes. Product: Ultimate Coming Soon, Maintenance Mode Plugin for WordPress – Everest Coming Soon Lite. - affected: `1.1.0 to before 1.1.0*` (custom) - affected: `1.1.1 to before 1.1.1` (custom) - Vendor: AccessPress Themes. Product: Free WordPress Plugin To Display Like/Dislike Comment Rating – Everest Comment Rating Lite. - affected: `2.0.4 to before 2.0.4*` (custom) - affected: `2.0.5 to before 2.0.5` (custom) - Vendor: AccessPress Themes. Product: Beautiful Stat Counter Plugin for WordPress – Everest Counter Lite. - affected: `2.0.7 to before 2.0.7*` (custom) - affected: `2.0.8 to before 2.0.8` (custom) - Vendor: AccessPress Themes. Product: Beautiful FAQ Plugin for WordPress – Everest FAQ Manager Lite. - affected: `1.0.8 to before 1.0.8*` (custom) - affected: `1.0.9 to before 1.0.9` (custom) - Vendor: AccessPress Themes. Product: Responsive Media Gallery Plugin for WordPress – Everest Gallery Lite. - affected: `1.0.8 to before 1.0.8*` (custom) - affected: `1.0.9 to before 1.0.9` (custom) - Vendor: AccessPress Themes. Product: Everest GPlaces Business Reviews. - affected: `1.0.9 to before 1.0.9*` (custom) - affected: `2.0.0 to before 2.0.0` (custom) - Vendor: AccessPress Themes. Product: Everest Review Lite – User/Admin review plugin for WordPress. - affected: `1.0.7` - Vendor: AccessPress Themes. Product: Free Responsive Tab Plugin For WordPress – Everest Tab Lite. - affected: `2.0.3 to before 2.0.3*` (custom) - affected: `2.0.4 to before 2.0.4` (custom) - Vendor: AccessPress Themes. Product: Responsive WordPress Timeline Plugin – Everest Timeline Lite. - affected: `1.1.1 to before 1.1.1*` (custom) - affected: `1.1.2 to before 1.1.2` (custom) - Vendor: AccessPress Themes. Product: Inline Call To Action Builder Lite – Free Call To Action Layer Plugin for WordPress. - affected: `1.1.0 to before 1.1.0*` (custom) - affected: `1.1.1 to before 1.1.1` (custom) - Vendor: AccessPress Themes. Product: Product Slider For WooCommerce Lite. - affected: `1.1.5 to before 1.1.5*` (custom) - affected: `1.1.6 to before 1.1.6` (custom) - Vendor: AccessPress Themes. Product: Responsive Clients Logo Gallery Plugin for WordPress – Smart Logo Showcase Lite. - affected: `1.1.7 to before 1.1.7*` (custom) - affected: `1.1.8 to before 1.1.8` (custom) - Vendor: AccessPress Themes. Product: Smart Scroll Posts for WordPress. - affected: `2.0.8 to before 2.0.8*` (custom) - affected: `2.0.9 to before 2.0.9` (custom) - Vendor: AccessPress Themes. Product: Faster and Easier scroll to Top Plugin for WordPress – Smart Scroll to Top Lite. - affected: `1.0.3 to before 1.0.3*` (custom) - affected: `1.0.4 to before 1.0.4` (custom) - Vendor: AccessPress Themes. Product: Total GDPR Compliance Lite – WordPress Plugin for GDPR Compatibility. - affected: `1.0.4` - Vendor: AccessPress Themes. Product: Total Team Lite – Responsive Team Manager / Showcase Plugin for WordPress. - affected: `1.1.1 to before 1.1.1*` (custom) - affected: `1.1.2 to before 1.1.2` (custom) - Vendor: AccessPress Themes. Product: Free Responsive Post/Article Author Section Plugin for WordPress – Ultimate Author Box Lite. - affected: `1.1.2 to before 1.1.2*` (custom) - affected: `1.1.3 to before 1.1.3` (custom) And 53 more products. The full list is on the CVE record: ## Not analysed yet We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter. ## Severity and exploitation No source has published a CVSS score for this record yet. - **CISA KEV:** Not listed. - **EPSS:** 0.18, the 97th percentile, on 7 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days. ## Timeline This record came from the full history of the CVE Program, published 21 Feb 2022. New records show when each source confirmed them. ## Sources - [CVE List: CVE-2021-24867](https://www.cve.org/CVERecord?id=CVE-2021-24867) - [NVD: CVE-2021-24867](https://nvd.nist.gov/vuln/detail/CVE-2021-24867) ### References from the CNA - - Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description. ## Check whether this affects you This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run. - With the agentprime MCP server (), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: - As JSON: - Everything that needs attention now: --- The web page: . Everything for agents: .