Lucene search

[email protected]NVD:CVE-2021-24867

HistoryFeb 21, 2022 - 11:15 a.m.

CVE-2021-24867

2022-02-2111:15:08

CWE-912

[email protected]

web.nvd.nist.gov

accesspress themes

backdoored

compromised website

wordpress.org

cve-2021-24867

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.004

Percentile

75.2%

JSON

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusion

Affected configurations

Nvd

Node

accesspressthemesaccessbuddyMatch1.0.0wordpress

accesspressthemesaccesspress_anonymous_postMatch2.8.0wordpress

accesspressthemesaccesspress_basicMatch3.2.1wordpress

accesspressthemesaccesspress_custom_cssMatch2.0.1wordpress

accesspressthemesaccesspress_custom_post_typeMatch1.0.8wordpress

accesspressthemesaccesspress_ifeedsMatch4.0.3wordpress

accesspressthemesaccesspress_liteMatch2.92wordpress

accesspressthemesaccesspress_magMatch2.6.5wordpress

accesspressthemesaccesspress_parallaxMatch4.5wordpress

accesspressthemesaccesspress_rayMatch1.19.5wordpress

accesspressthemesaccesspress_rootMatch2.5wordpress

accesspressthemesaccesspress_social_counterMatch1.9.1wordpress

accesspressthemesaccesspress_social_iconsMatch1.8.2wordpress

accesspressthemesaccesspress_social_login_liteMatch3.4.7wordpress

accesspressthemesaccesspress_social_shareMatch4.5.5wordpress

accesspressthemesaccesspress_stapleMatch1.9.1wordpress

accesspressthemesaccesspress_storeMatch2.4.9wordpress

accesspressthemesagency_liteMatch1.1.6wordpress

accesspressthemesap_companionRange<1.0.7wordpress

accesspressthemesap_contact_formMatch1.0.6wordpress

accesspressthemesap_custom_testimonialMatch1.4.6wordpress

accesspressthemesap_mega_menuMatch3.0.5wordpress

accesspressthemesap_pricing_tables_liteMatch1.1.2wordpress

accesspressthemesapex_notification_bar_liteMatch2.0.4wordpress

accesspressthemesapliteMatch1.0.6wordpress

accesspressthemesbadge_designer_lite_for_woocommerceMatch1.1.0wordpress

accesspressthemesbingleMatch1.0.4wordpress

accesspressthemesblogerMatch1.2.6wordpress

accesspressthemescomments_disable_-_accesspressMatch1.0.7wordpress

accesspressthemesconstruction_liteMatch1.2.5wordpress

accesspressthemesdokoMatch1.0.27wordpress

accesspressthemeseasy_side_tabMatch1.0.7wordpress

accesspressthemesenlightenMatch1.3.5wordpress

accesspressthemeseverest_admin_theme_liteMatch1.0.7wordpress

accesspressthemeseverest_coming_soon_liteMatch1.1.0wordpress

accesspressthemeseverest_comment_rating_liteMatch2.0.4wordpress

accesspressthemeseverest_counter_liteMatch2.0.7wordpress

accesspressthemeseverest_faq_manager_liteMatch1.0.8wordpress

accesspressthemeseverest_gallery_liteMatch1.0.8wordpress

accesspressthemeseverest_gplaces_business_reviewsMatch1.0.9wordpress

accesspressthemeseverest_review_liteMatch1.0.7wordpress

accesspressthemeseverest_tab_liteMatch2.0.3wordpress

accesspressthemeseverest_timeline_liteMatch1.1.1wordpress

accesspressthemesfashstoreMatch1.2.1wordpress

accesspressthemesform_store_to_dbMatch1.0.9wordpress

accesspressthemesfotographyMatch2.4.0wordpress

accesspressthemesgaga_corpMatch1.0.8wordpress

accesspressthemesgaga_liteMatch1.4.2wordpress

accesspressthemesinline_call_to_action_builder_liteMatch1.1.0wordpress

accesspressthemesmcontact_buttonRange<2.0.7wordpress

accesspressthemesone-pazeMatch2.2.8wordpress

accesspressthemesparallax_blogMatch3.1.1574941215wordpress

accesspressthemesparallaxsomeMatch1.3.6wordpress

accesspressthemespi_buttonMatch3.3.3wordpress

accesspressthemesproduct_slider_for_woocommerce_liteMatch1.1.5wordpress

accesspressthemespunteMatch1.1.2wordpress

accesspressthemesrevolveMatch1.3.1wordpress

accesspressthemesrippleMatch1.2.0wordpress

accesspressthemesscrollmeMatch2.1.0wordpress

accesspressthemessmart_logo_showcase_liteMatch1.1.7wordpress

accesspressthemessmart_scroll_postsMatch2.0.8wordpress

accesspressthemessmart_scroll_to_top_liteMatch1.0.3wordpress

accesspressthemessocial_auto_posterMatch2.1.3wordpress

accesspressthemessocial_reviewRange<1.0.9wordpress

accesspressthemessportsmagMatch1.2.1wordpress

accesspressthemesstorevillaMatch1.4.1wordpress

accesspressthemesswing_liteMatch1.1.9wordpress

accesspressthemestauto_posterMatch1.4.5wordpress

accesspressthemesthe_launcherMatch1.3.2wordpress

accesspressthemesthe_mondayMatch1.4.1wordpress

accesspressthemestotal_gdpr_compliance_liteMatch1.0.4wordpress

accesspressthemestotal_team_liteMatch1.1.1wordpress

accesspressthemesultimate-form-builder-liteMatch1.5.0wordpress

accesspressthemesultimate_author_box_liteMatch1.1.2wordpress

accesspressthemesuncode_liteMatch1.3.1wordpress

accesspressthemesunicon_liteMatch1.2.6wordpress

accesspressthemesvmagMatch1.2.7wordpress

accesspressthemesvmagazine_liteMatch1.3.5wordpress

accesspressthemesvmagazine_newsMatch1.0.5wordpress

accesspressthemeswp_1_sliderMatch1.2.9wordpress

accesspressthemeswp_blog_manager_liteMatch1.1.0wordpress

accesspressthemeswp_comment_designer_liteMatch2.0.3wordpress

accesspressthemeswp_cookie_user_infoMatch1.0.7wordpress

accesspressthemeswp_floating_menuMatch1.4.4wordpress

accesspressthemeswp_media_manager_liteMatch1.1.2wordpress

accesspressthemeswp_menu_icons_liteRange<1.0.9wordpress

accesspressthemeswp_popup_bannersMatch1.2.3wordpress

accesspressthemeswp_popup_liteMatch1.0.8wordpress

accesspressthemeswp_product_gallery_liteMatch1.1.1wordpress

accesspressthemeswp_tfeedMatch1.6.7wordpress

accesspressthemeszigcy_babyMatch1.0.6wordpress

accesspressthemeszigcy_cosmeticsMatch1.0.5wordpress

accesspressthemeszigcy_liteMatch2.0.9wordpress

VendorProductVersionCPE
accesspressthemesaccessbuddy1.0.0cpe:2.3:a:accesspressthemes:accessbuddy:1.0.0:*:*:*:*:wordpress:*:*
accesspressthemesaccesspress_anonymous_post2.8.0cpe:2.3:a:accesspressthemes:accesspress_anonymous_post:2.8.0:*:*:*:*:wordpress:*:*
accesspressthemesaccesspress_basic3.2.1cpe:2.3:a:accesspressthemes:accesspress_basic:3.2.1:*:*:*:*:wordpress:*:*
accesspressthemesaccesspress_custom_css2.0.1cpe:2.3:a:accesspressthemes:accesspress_custom_css:2.0.1:*:*:*:*:wordpress:*:*
accesspressthemesaccesspress_custom_post_type1.0.8cpe:2.3:a:accesspressthemes:accesspress_custom_post_type:1.0.8:*:*:*:*:wordpress:*:*
accesspressthemesaccesspress_ifeeds4.0.3cpe:2.3:a:accesspressthemes:accesspress_ifeeds:4.0.3:*:*:*:*:wordpress:*:*
accesspressthemesaccesspress_lite2.92cpe:2.3:a:accesspressthemes:accesspress_lite:2.92:*:*:*:*:wordpress:*:*
accesspressthemesaccesspress_mag2.6.5cpe:2.3:a:accesspressthemes:accesspress_mag:2.6.5:*:*:*:*:wordpress:*:*
accesspressthemesaccesspress_parallax4.5cpe:2.3:a:accesspressthemes:accesspress_parallax:4.5:*:*:*:*:wordpress:*:*
accesspressthemesaccesspress_ray1.19.5cpe:2.3:a:accesspressthemes:accesspress_ray:1.19.5:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
accesspressthemes	accessbuddy	1.0.0	cpe:2.3:a:accesspressthemes:accessbuddy:1.0.0:::::wordpress::
accesspressthemes	accesspress_anonymous_post	2.8.0	cpe:2.3:a:accesspressthemes:accesspress_anonymous_post:2.8.0:::::wordpress::
accesspressthemes	accesspress_basic	3.2.1	cpe:2.3:a:accesspressthemes:accesspress_basic:3.2.1:::::wordpress::
accesspressthemes	accesspress_custom_css	2.0.1	cpe:2.3:a:accesspressthemes:accesspress_custom_css:2.0.1:::::wordpress::
accesspressthemes	accesspress_custom_post_type	1.0.8	cpe:2.3:a:accesspressthemes:accesspress_custom_post_type:1.0.8:::::wordpress::
accesspressthemes	accesspress_ifeeds	4.0.3	cpe:2.3:a:accesspressthemes:accesspress_ifeeds:4.0.3:::::wordpress::
accesspressthemes	accesspress_lite	2.92	cpe:2.3:a:accesspressthemes:accesspress_lite:2.92:::::wordpress::
accesspressthemes	accesspress_mag	2.6.5	cpe:2.3:a:accesspressthemes:accesspress_mag:2.6.5:::::wordpress::
accesspressthemes	accesspress_parallax	4.5	cpe:2.3:a:accesspressthemes:accesspress_parallax:4.5:::::wordpress::
accesspressthemes	accesspress_ray	1.19.5	cpe:2.3:a:accesspressthemes:accesspress_ray:1.19.5:::::wordpress::