9.8

CVE-2021-24867

Exploit

Backdoored Plugins & Themes from AccessPress Themes

AccessPress Anonymous Post = 2.8.0 - Backdoored

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusion
Mögliche Gegenmaßnahme
Frontend Post WordPress Plugin – AccessPress Anonymous Post: Update to version 2.8.1, or a newer patched version
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Accesspressthemes ≫ Accessbuddy Version 1.0.0 SwPlatform wordpress
Accesspressthemes ≫ Accesspress Anonymous Post Version 2.8.0 SwPlatform wordpress
Accesspressthemes ≫ Accesspress Basic Version 3.2.1 SwPlatform wordpress
Accesspressthemes ≫ Accesspress Custom Css Version 2.0.1 SwPlatform wordpress
Accesspressthemes ≫ Accesspress Custom Post Type Version 1.0.8 SwPlatform wordpress
Accesspressthemes ≫ Accesspress Ifeeds Version 4.0.3 SwPlatform wordpress
Accesspressthemes ≫ Accesspress Lite Version 2.92 SwPlatform wordpress
Accesspressthemes ≫ Accesspress Mag Version 2.6.5 SwPlatform wordpress
Accesspressthemes ≫ Accesspress Parallax Version 4.5 SwPlatform wordpress
Accesspressthemes ≫ Accesspress Ray Version 1.19.5 SwPlatform wordpress
Accesspressthemes ≫ Accesspress Root Version 2.5 SwPlatform wordpress
Accesspressthemes ≫ Accesspress Social Counter Version 1.9.1 SwPlatform wordpress
Accesspressthemes ≫ Accesspress Social Icons Version 1.8.2 SwPlatform wordpress
Accesspressthemes ≫ Accesspress Social Login Lite Version 3.4.7 SwPlatform wordpress
Accesspressthemes ≫ Accesspress Social Share Version 4.5.5 SwPlatform wordpress
Accesspressthemes ≫ Accesspress Staple Version 1.9.1 SwPlatform wordpress
Accesspressthemes ≫ Accesspress Store Version 2.4.9 SwPlatform wordpress
Accesspressthemes ≫ Agency Lite Version 1.1.6 SwPlatform wordpress
Accesspressthemes ≫ Ap Companion SwPlatform wordpress Version < 1.0.7
Accesspressthemes ≫ Ap Contact Form Version 1.0.6 SwPlatform wordpress
Accesspressthemes ≫ Ap Custom Testimonial Version 1.4.6 SwPlatform wordpress
Accesspressthemes ≫ Ap Mega Menu Version 3.0.5 SwPlatform wordpress
Accesspressthemes ≫ Ap Pricing Tables Lite Version 1.1.2 SwPlatform wordpress
Accesspressthemes ≫ Apex Notification Bar Lite Version 2.0.4 SwPlatform wordpress
Accesspressthemes ≫ Aplite Version 1.0.6 SwPlatform wordpress
Accesspressthemes ≫ Badge Designer Lite For Woocommerce Version 1.1.0 SwPlatform wordpress
Accesspressthemes ≫ Bingle Version 1.0.4 SwPlatform wordpress
Accesspressthemes ≫ Bloger Version 1.2.6 SwPlatform wordpress
Accesspressthemes ≫ Comments Disable - Accesspress Version 1.0.7 SwPlatform wordpress
Accesspressthemes ≫ Construction Lite Version 1.2.5 SwPlatform wordpress
Accesspressthemes ≫ Doko Version 1.0.27 SwPlatform wordpress
Accesspressthemes ≫ Easy Side Tab Version 1.0.7 SwPlatform wordpress
Accesspressthemes ≫ Enlighten Version 1.3.5 SwPlatform wordpress
Accesspressthemes ≫ Everest Admin Theme Lite Version 1.0.7 SwPlatform wordpress
Accesspressthemes ≫ Everest Coming Soon Lite Version 1.1.0 SwPlatform wordpress
Accesspressthemes ≫ Everest Comment Rating Lite Version 2.0.4 SwPlatform wordpress
Accesspressthemes ≫ Everest Counter Lite Version 2.0.7 SwPlatform wordpress
Accesspressthemes ≫ Everest Faq Manager Lite Version 1.0.8 SwPlatform wordpress
Accesspressthemes ≫ Everest Gallery Lite Version 1.0.8 SwPlatform wordpress
Accesspressthemes ≫ Everest Gplaces Business Reviews Version 1.0.9 SwPlatform wordpress
Accesspressthemes ≫ Everest Review Lite Version 1.0.7 SwPlatform wordpress
Accesspressthemes ≫ Everest Tab Lite Version 2.0.3 SwPlatform wordpress
Accesspressthemes ≫ Everest Timeline Lite Version 1.1.1 SwPlatform wordpress
Accesspressthemes ≫ Fashstore Version 1.2.1 SwPlatform wordpress
Accesspressthemes ≫ Form Store To Db Version 1.0.9 SwPlatform wordpress
Accesspressthemes ≫ Fotography Version 2.4.0 SwPlatform wordpress
Accesspressthemes ≫ Gaga Corp Version 1.0.8 SwPlatform wordpress
Accesspressthemes ≫ Gaga Lite Version 1.4.2 SwPlatform wordpress
Accesspressthemes ≫ Inline Call To Action Builder Lite Version 1.1.0 SwPlatform wordpress
Accesspressthemes ≫ Mcontact Button SwPlatform wordpress Version < 2.0.7
Accesspressthemes ≫ One-paze Version 2.2.8 SwPlatform wordpress
Accesspressthemes ≫ Parallax Blog Version 3.1.1574941215 SwPlatform wordpress
Accesspressthemes ≫ Parallaxsome Version 1.3.6 SwPlatform wordpress
Accesspressthemes ≫ Pi Button Version 3.3.3 SwPlatform wordpress
Accesspressthemes ≫ Product Slider For Woocommerce Lite Version 1.1.5 SwPlatform wordpress
Accesspressthemes ≫ Punte Version 1.1.2 SwPlatform wordpress
Accesspressthemes ≫ Revolve Version 1.3.1 SwPlatform wordpress
Accesspressthemes ≫ Ripple Version 1.2.0 SwPlatform wordpress
Accesspressthemes ≫ Scrollme Version 2.1.0 SwPlatform wordpress
Accesspressthemes ≫ Smart Logo Showcase Lite Version 1.1.7 SwPlatform wordpress
Accesspressthemes ≫ Smart Scroll Posts Version 2.0.8 SwPlatform wordpress
Accesspressthemes ≫ Smart Scroll To Top Lite Version 1.0.3 SwPlatform wordpress
Accesspressthemes ≫ Social Auto Poster Version 2.1.3 SwPlatform wordpress
Accesspressthemes ≫ Social Review SwPlatform wordpress Version < 1.0.9
Accesspressthemes ≫ Sportsmag Version 1.2.1 SwPlatform wordpress
Accesspressthemes ≫ Storevilla Version 1.4.1 SwPlatform wordpress
Accesspressthemes ≫ Swing Lite Version 1.1.9 SwPlatform wordpress
Accesspressthemes ≫ Tauto Poster Version 1.4.5 SwPlatform wordpress
Accesspressthemes ≫ The Launcher Version 1.3.2 SwPlatform wordpress
Accesspressthemes ≫ The Monday Version 1.4.1 SwPlatform wordpress
Accesspressthemes ≫ Total Gdpr Compliance Lite Version 1.0.4 SwPlatform wordpress
Accesspressthemes ≫ Total Team Lite Version 1.1.1 SwPlatform wordpress
Accesspressthemes ≫ Ultimate-form-builder-lite Version 1.5.0 SwPlatform wordpress
Accesspressthemes ≫ Ultimate Author Box Lite Version 1.1.2 SwPlatform wordpress
Accesspressthemes ≫ Uncode Lite Version 1.3.1 SwPlatform wordpress
Accesspressthemes ≫ Unicon Lite Version 1.2.6 SwPlatform wordpress
Accesspressthemes ≫ Vmag Version 1.2.7 SwPlatform wordpress
Accesspressthemes ≫ Vmagazine Lite Version 1.3.5 SwPlatform wordpress
Accesspressthemes ≫ Vmagazine News Version 1.0.5 SwPlatform wordpress
Accesspressthemes ≫ Wp 1 Slider Version 1.2.9 SwPlatform wordpress
Accesspressthemes ≫ Wp Blog Manager Lite Version 1.1.0 SwPlatform wordpress
Accesspressthemes ≫ Wp Comment Designer Lite Version 2.0.3 SwPlatform wordpress
Accesspressthemes ≫ Wp Cookie User Info Version 1.0.7 SwPlatform wordpress
Accesspressthemes ≫ Wp Floating Menu Version 1.4.4 SwPlatform wordpress
Accesspressthemes ≫ Wp Media Manager Lite Version 1.1.2 SwPlatform wordpress
Accesspressthemes ≫ Wp Menu Icons Lite SwPlatform wordpress Version < 1.0.9
Accesspressthemes ≫ Wp Popup Banners Version 1.2.3 SwPlatform wordpress
Accesspressthemes ≫ Wp Popup Lite Version 1.0.8 SwPlatform wordpress
Accesspressthemes ≫ Wp Product Gallery Lite Version 1.1.1 SwPlatform wordpress
Accesspressthemes ≫ Wp Tfeed Version 1.6.7 SwPlatform wordpress
Accesspressthemes ≫ Zigcy Baby Version 1.0.6 SwPlatform wordpress
Accesspressthemes ≫ Zigcy Cosmetics Version 1.0.5 SwPlatform wordpress
Accesspressthemes ≫ Zigcy Lite Version 2.0.9 SwPlatform wordpress
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt Frontend Post WordPress Plugin – AccessPress Anonymous Post
Version 2.8.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 18.88% 0.969
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-912 Hidden Functionality

The product contains functionality that is not documented, not part of the specification, and not accessible through an interface or command sequence that is obvious to the product's users or administrators.

https://jetpack.com/2022/01/18/backdoor-found-in-themes-and-plugins-from-accesspress-themes/
Third Party Advisory
Exploit
https://wpscan.com/vulnerability/9c76bada-fa32-4c2f-9855-d0efd1e63eff
Third Party Advisory
Exploit
https://www.wordfence.com/threat-intel/vulnerabilities/id/415ace14-1687-4003-b385-a21a5d5e16a7
Third Party Advisory