CVE record · CVE-2021-24867

Backdoored Plugins & Themes from AccessPress Themes

No CVSS scoreEPSS 0.18 · 97th percentile

Published by the CVE Program (CNA: WPScan) at 21 Feb 2022, 10:45 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
AccessPress Themes	Frontend Post WordPress Plugin – AccessPress Anonymous Post	affected 2.8.0 to before 2.8.0* custom affected 2.8.1 to before 2.8.1 custom
AccessPress Themes	AccessPress Custom CSS	affected 2.0.1 to before 2.0.1* custom affected 2.0.2 to before 2.0.2 custom
AccessPress Themes	AccessPress Custom Post Type	affected 1.0.8 to before 1.0.8* custom affected 1.0.9 to before 1.0.9 custom
AccessPress Themes	Social Auto Poster	affected 2.1.3 to before 2.1.3* custom affected 2.1.4 to before 2.1.4 custom
AccessPress Themes	AccessPress iFeeds	affected 4.0.3 to before 4.0.3* custom affected 4.0.4 to before 4.0.4 custom
AccessPress Themes	PI Button	affected 3.3.3 to before 3.3.3* custom affected 3.3.4 to before 3.3.4 custom
AccessPress Themes	AccessPress Social Counter	affected 1.9.1 to before 1.9.1* custom affected 1.9.2 to before 1.9.2 custom
AccessPress Themes	AccessPress Social Icons	affected 1.8.2 to before 1.8.2* custom affected 1.8.3 to before 1.8.3 custom
AccessPress Themes	AccessPress Social Login Lite – Social Login WordPress Plugin	affected 3.4.7 to before 3.4.7* custom affected 3.4.8 to before 3.4.8 custom
AccessPress Themes	AccessPress Social Share	affected 4.5.5 to before 4.5.5* custom affected 4.5.6 to before 4.5.6 custom
AccessPress Themes	TAuto Poster	affected 1.4.5 to before 1.4.5* custom affected 1.4.6 to before 1.4.6 custom
AccessPress Themes	WP TFeed	affected 1.6.7 to before 1.6.7* custom affected 1.6.8 to before 1.6.8 custom
AccessPress Themes	Effectively Add & Customize Free Icons For WordPress Menus – WP Menu Icons Lite	affected 1.0.9 to before 1.0.9 custom
AccessPress Themes	AP Companion	affected 1.0.7 to before 1.0.7 custom
AccessPress Themes	Easiest Contact Form for WordPress – AP Contact Form	affected 1.0.6 to before 1.0.6* custom affected 1.0.7 to before 1.0.7 custom
AccessPress Themes	Testimonial WordPress Plugin – AP Custom Testimonial	affected 1.4.6 to before 1.4.6* custom affected 1.4.7 to before 1.4.7 custom
AccessPress Themes	Mega Menu Plugin for WordPress – AP Mega Menu	affected 3.0.5 to before 3.0.5* custom affected 3.0.6 to before 3.0.6 custom
AccessPress Themes	Pricing Table Builder – AP Pricing Tables Lite	affected 1.1.3 to before 1.1.3* custom
AccessPress Themes	Responsive Notification Bar Plugin for WordPress – Apex Notification Bar Lite	affected 2.0.4 to before 2.0.4* custom affected 2.0.5 to before 2.0.5 custom
AccessPress Themes	Form Store to DB	affected 1.0.9 to before 1.0.9* custom affected 1.1.0 to before 1.1.0 custom
AccessPress Themes	Comments Disable – AccessPress	affected 1.0.7 to before 1.0.7* custom affected 1.0.8 to before 1.0.8 custom
AccessPress Themes	CTA plugin for WordPress – Easy Side Tab	affected 1.0.7 to before 1.0.7* custom affected 1.0.8 to before 1.0.8 custom
AccessPress Themes	WordPress Backend Customizer – Everest Admin Theme Lite	affected 1.0.7 to before 1.0.7* custom affected 1.0.8 to before 1.0.8 custom
AccessPress Themes	Ultimate Coming Soon, Maintenance Mode Plugin for WordPress – Everest Coming Soon Lite	affected 1.1.0 to before 1.1.0* custom affected 1.1.1 to before 1.1.1 custom
AccessPress Themes	Free WordPress Plugin To Display Like/Dislike Comment Rating – Everest Comment Rating Lite	affected 2.0.4 to before 2.0.4* custom affected 2.0.5 to before 2.0.5 custom
AccessPress Themes	Beautiful Stat Counter Plugin for WordPress – Everest Counter Lite	affected 2.0.7 to before 2.0.7* custom affected 2.0.8 to before 2.0.8 custom
AccessPress Themes	Beautiful FAQ Plugin for WordPress – Everest FAQ Manager Lite	affected 1.0.8 to before 1.0.8* custom affected 1.0.9 to before 1.0.9 custom
AccessPress Themes	Responsive Media Gallery Plugin for WordPress – Everest Gallery Lite	affected 1.0.8 to before 1.0.8* custom affected 1.0.9 to before 1.0.9 custom
AccessPress Themes	Everest GPlaces Business Reviews	affected 1.0.9 to before 1.0.9* custom affected 2.0.0 to before 2.0.0 custom
AccessPress Themes	Everest Review Lite – User/Admin review plugin for WordPress	affected 1.0.7
AccessPress Themes	Free Responsive Tab Plugin For WordPress – Everest Tab Lite	affected 2.0.3 to before 2.0.3* custom affected 2.0.4 to before 2.0.4 custom
AccessPress Themes	Responsive WordPress Timeline Plugin – Everest Timeline Lite	affected 1.1.1 to before 1.1.1* custom affected 1.1.2 to before 1.1.2 custom
AccessPress Themes	Inline Call To Action Builder Lite – Free Call To Action Layer Plugin for WordPress	affected 1.1.0 to before 1.1.0* custom affected 1.1.1 to before 1.1.1 custom
AccessPress Themes	Product Slider For WooCommerce Lite	affected 1.1.5 to before 1.1.5* custom affected 1.1.6 to before 1.1.6 custom
AccessPress Themes	Responsive Clients Logo Gallery Plugin for WordPress – Smart Logo Showcase Lite	affected 1.1.7 to before 1.1.7* custom affected 1.1.8 to before 1.1.8 custom
AccessPress Themes	Smart Scroll Posts for WordPress	affected 2.0.8 to before 2.0.8* custom affected 2.0.9 to before 2.0.9 custom
AccessPress Themes	Faster and Easier scroll to Top Plugin for WordPress – Smart Scroll to Top Lite	affected 1.0.3 to before 1.0.3* custom affected 1.0.4 to before 1.0.4 custom
AccessPress Themes	Total GDPR Compliance Lite – WordPress Plugin for GDPR Compatibility	affected 1.0.4
AccessPress Themes	Total Team Lite – Responsive Team Manager / Showcase Plugin for WordPress	affected 1.1.1 to before 1.1.1* custom affected 1.1.2 to before 1.1.2 custom
AccessPress Themes	Free Responsive Post/Article Author Section Plugin for WordPress – Ultimate Author Box Lite	affected 1.1.2 to before 1.1.2* custom affected 1.1.3 to before 1.1.3 custom

And 53 more products. The full list is on the CVE record.

Identifiers: CVE-2021-24867
CNA: WPScan
Weakness (CWE): CWE-912
Tags: AccessPress Themes Frontend Post WordPress Plugin – AccessPress Anonymous Post
AccessPress Themes AccessPress Custom CSS
AccessPress Themes AccessPress Custom Post Type
AccessPress Themes Social Auto Poster
AccessPress Themes AccessPress iFeeds
AccessPress Themes PI Button
AccessPress Themes AccessPress Social Counter
AccessPress Themes AccessPress Social Icons
CWE-912
Published: 21 Feb 2022
Updated: 3 Aug 2024

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

CISA KEV Not listed.
EPSS 0.18, the 97th percentile, on 7 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 21 Feb 2022. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.