{ "CVE_data_meta": { "ID": "CVE-2021-24867", "ASSIGNER": "contact@wpscan.com", "STATE": "PUBLIC", "TITLE": "Backdoored Plugins & Themes from AccessPress Themes" }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "generator": "WPScan CVE Generator", "affects": { "vendor": { "vendor_data": [ { "vendor_name": "AccessPress Themes", "product": { "product_data": [ { "product_name": "Frontend Post WordPress Plugin – AccessPress Anonymous Post", "version": { "version_data": [ { "version_affected": ">=", "version_name": "2.8.0", "version_value": "2.8.0" }, { "version_affected": "<", "version_name": "2.8.1", "version_value": "2.8.1" } ] } }, { "product_name": "AccessPress Custom CSS", "version": { "version_data": [ { "version_affected": ">=", "version_name": "2.0.1", "version_value": "2.0.1" }, { "version_affected": "<", "version_name": "2.0.2", "version_value": "2.0.2" } ] } }, { "product_name": "AccessPress Custom Post Type", "version": { "version_data": [ { "version_affected": ">=", "version_name": "1.0.8", "version_value": "1.0.8" }, { "version_affected": "<", "version_name": "1.0.9", "version_value": "1.0.9" } ] } }, { "product_name": "Social Auto Poster", "version": { "version_data": [ { "version_affected": ">=", "version_name": "2.1.3", "version_value": "2.1.3" }, { "version_affected": "<", "version_name": "2.1.4", "version_value": "2.1.4" } ] } }, { "product_name": "AccessPress iFeeds", "version": { "version_data": [ { "version_affected": ">=", "version_name": "4.0.3", "version_value": "4.0.3" }, { "version_affected": "<", "version_name": "4.0.4", "version_value": "4.0.4" } ] } }, { "product_name": "PI Button", "version": { "version_data": [ { "version_affected": ">=", "version_name": "3.3.3", "version_value": "3.3.3" }, { "version_affected": "<", "version_name": "3.3.4", "version_value": "3.3.4" } ] } }, { "product_name": "AccessPress Social Counter", "version": { "version_data": [ { "version_affected": ">=", "version_name": "1.9.1", "version_value": "1.9.1" }, { "version_affected": "<", "version_name": "1.9.2", "version_value": "1.9.2" } ] } }, { "product_name": "AccessPress Social Icons", "version": { "version_data": [ { "version_affected": ">=", "version_name": "1.8.2", "version_value": "1.8.2" }, { "version_affected": "<", "version_name": "1.8.3", "version_value": "1.8.3" } ] } }, { "product_name": "AccessPress Social Login Lite – Social Login WordPress Plugin", "version": { "version_data": [ { "version_affected": ">=", "version_name": "3.4.7", "version_value": "3.4.7" }, { "version_affected": "<", "version_name": "3.4.8", "version_value": "3.4.8" } ] } }, { "product_name": "AccessPress Social Share", "version": { "version_data": [ { "version_affected": ">=", "version_name": "4.5.5", "version_value": "4.5.5" }, { "version_affected": "<", "version_name": "4.5.6", "version_value": "4.5.6" } ] } }, { "product_name": "TAuto Poster", "version": { "version_data": [ { "version_affected": ">=", "version_name": "1.4.5", "version_value": "1.4.5" }, { "version_affected": "<", "version_name": "1.4.6", "version_value": "1.4.6" } ] } }, { "product_name": "WP TFeed", "version": { "version_data": [ { "version_affected": ">=", "version_name": "1.6.7", "version_value": "1.6.7" }, { "version_affected": "<", "version_name": "1.6.8", "version_value": "1.6.8" } ] } }, { "product_name": "Effectively Add & Customize Free Icons For WordPress Menus – WP Menu Icons Lite", "version": { "version_data": [ { "version_affected": "<", "version_name": "1.0.9", "version_value": "1.0.9" } ] } }, { "product_name": "AP Companion", "version": { "version_data": [ { "version_affected": "<", "version_name": "1.0.7", "version_value": "1.0.7" } ] } }, { "product_name": "Easiest Contact Form for WordPress – AP Contact Form", "version": { "version_data": [ { "version_affected": ">=", "version_name": "1.0.6", "version_value": "1.0.6" }, { "version_affected": "<", "version_name": "1.0.7", "version_value": "1.0.7" } ] } }, { "product_name": "Testimonial WordPress Plugin – AP Custom Testimonial", "version": { "version_data": [ { "version_affected": ">=", "version_name": "1.4.6", "version_value": "1.4.6" }, { "version_affected": "<", "version_name": "1.4.7", "version_value": "1.4.7" } ] } }, { "product_name": "Mega Menu Plugin for WordPress – AP Mega Menu", "version": { "version_data": [ { "version_affected": ">=", "version_name": "3.0.5", "version_value": "3.0.5" }, { "version_affected": "<", "version_name": "3.0.6", "version_value": "3.0.6" } ] } }, { "product_name": "Pricing Table Builder – AP Pricing Tables Lite", "version": { "version_data": [ { "version_affected": ">=", "version_name": "1.1.3", "version_value": "1.1.3" }, { "version_affected": "<", "version_name": "1.1.3", "version_value": "1.1.3" } ] } }, { "product_name": "Responsive Notification Bar Plugin for WordPress – Apex Notification Bar Lite", "version": { "version_data": [ { "version_affected": ">=", "version_name": "2.0.4", "version_value": "2.0.4" }, { "version_affected": "<", "version_name": "2.0.5", "version_value": "2.0.5" } ] } }, { "product_name": "Form Store to DB", "version": { "version_data": [ { "version_affected": ">=", "version_name": "1.0.9", "version_value": "1.0.9" }, { "version_affected": "<", "version_name": "1.1.0", "version_value": "1.1.0" } ] } }, { "product_name": "Comments Disable – AccessPress", "version": { "version_data": [ { "version_affected": ">=", "version_name": "1.0.7", "version_value": "1.0.7" }, { "version_affected": "<", "version_name": "1.0.8", "version_value": "1.0.8" } ] } }, { "product_name": "CTA plugin for WordPress – Easy Side Tab", "version": { "version_data": [ { "version_affected": ">=", "version_name": "1.0.7", "version_value": "1.0.7" }, { "version_affected": "<", "version_name": "1.0.8", "version_value": "1.0.8" } ] } }, { "product_name": "WordPress Backend Customizer – Everest Admin Theme Lite", "version": { "version_data": [ { "version_affected": ">=", "version_name": "1.0.7", "version_value": "1.0.7" }, { "version_affected": "<", "version_name": "1.0.8", "version_value": "1.0.8" } ] } }, { "product_name": "Ultimate Coming Soon, Maintenance Mode Plugin for WordPress – Everest Coming Soon Lite", "version": { "version_data": [ { "version_affected": ">=", "version_name": "1.1.0", "version_value": "1.1.0" }, { "version_affected": "<", "version_name": "1.1.1", "version_value": "1.1.1" } ] } }, { "product_name": "Free WordPress Plugin To Display Like/Dislike Comment Rating – Everest Comment Rating Lite", "version": { "version_data": [ { "version_affected": ">=", "version_name": "2.0.4", "version_value": "2.0.4" }, { "version_affected": "<", "version_name": "2.0.5", "version_value": "2.0.5" } ] } }, { "product_name": "Beautiful Stat Counter Plugin for WordPress – Everest Counter Lite", "version": { "version_data": [ { "version_affected": ">=", "version_name": "2.0.7", "version_value": "2.0.7" }, { "version_affected": "<", "version_name": "2.0.8", "version_value": "2.0.8" } ] } }, { "product_name": "Beautiful FAQ Plugin for WordPress – Everest FAQ Manager Lite", "version": { "version_data": [ { "version_affected": ">=", "version_name": "1.0.8", "version_value": "1.0.8" }, { "version_affected": "<", "version_name": "1.0.9", "version_value": "1.0.9" } ] } }, { "product_name": "Responsive Media Gallery Plugin for WordPress – Everest Gallery Lite", "version": { "version_data": [ { "version_affected": ">=", "version_name": "1.0.8", "version_value": "1.0.8" }, { "version_affected": "<", "version_name": "1.0.9", "version_value": "1.0.9" } ] } }, { "product_name": "Everest GPlaces Business Reviews", "version": { "version_data": [ { "version_affected": ">=", "version_name": "1.0.9", "version_value": "1.0.9" }, { "version_affected": "<", "version_name": "2.0.0", "version_value": "2.0.0" } ] } }, { "product_name": "Everest Review Lite – User/Admin review plugin for WordPress", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.0.7", "version_value": "1.0.7" } ] } }, { "product_name": "Free Responsive Tab Plugin For WordPress – Everest Tab Lite", "version": { "version_data": [ { "version_affected": ">=", "version_name": "2.0.3", "version_value": "2.0.3" }, { "version_affected": "<", "version_name": "2.0.4", "version_value": "2.0.4" } ] } }, { "product_name": "Responsive WordPress Timeline Plugin – Everest Timeline Lite", "version": { "version_data": [ { "version_affected": ">=", "version_name": "1.1.1", "version_value": "1.1.1" }, { "version_affected": "<", "version_name": "1.1.2", "version_value": "1.1.2" } ] } }, { "product_name": "Inline Call To Action Builder Lite – Free Call To Action Layer Plugin for WordPress", "version": { "version_data": [ { "version_affected": ">=", "version_name": "1.1.0", "version_value": "1.1.0" }, { "version_affected": "<", "version_name": "1.1.1", "version_value": "1.1.1" } ] } }, { "product_name": "Product Slider For WooCommerce Lite", "version": { "version_data": [ { "version_affected": ">=", "version_name": "1.1.5", "version_value": "1.1.5" }, { "version_affected": "<", "version_name": "1.1.6", "version_value": "1.1.6" } ] } }, { "product_name": "Responsive Clients Logo Gallery Plugin for WordPress – Smart Logo Showcase Lite", "version": { "version_data": [ { "version_affected": ">=", "version_name": "1.1.7", "version_value": "1.1.7" }, { "version_affected": "<", "version_name": "1.1.8", "version_value": "1.1.8" } ] } }, { "product_name": "Smart Scroll Posts for WordPress", "version": { "version_data": [ { "version_affected": ">=", "version_name": "2.0.8", "version_value": "2.0.8" }, { "version_affected": "<", "version_name": "2.0.9", "version_value": "2.0.9" } ] } }, { "product_name": "Faster and Easier scroll to Top Plugin for WordPress – Smart Scroll to Top Lite", "version": { "version_data": [ { "version_affected": ">=", "version_name": "1.0.3", "version_value": "1.0.3" }, { "version_affected": "<", "version_name": "1.0.4", "version_value": "1.0.4" } ] } }, { "product_name": "Total GDPR Compliance Lite – WordPress Plugin for GDPR Compatibility", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.0.4", "version_value": "1.0.4" } ] } }, { "product_name": "Total Team Lite – Responsive Team Manager / Showcase Plugin for WordPress", "version": { "version_data": [ { "version_affected": ">=", "version_name": "1.1.1", "version_value": "1.1.1" }, { "version_affected": "<", "version_name": "1.1.2", "version_value": "1.1.2" } ] } }, { "product_name": "Free Responsive Post/Article Author Section Plugin for WordPress – Ultimate Author Box Lite", "version": { "version_data": [ { "version_affected": ">=", "version_name": "1.1.2", "version_value": "1.1.2" }, { "version_affected": "<", "version_name": "1.1.3", "version_value": "1.1.3" } ] } }, { "product_name": "Contact Form for WordPress – Ultimate Form Builder Lite", "version": { "version_data": [ { "version_affected": ">=", "version_name": "1.5.0", "version_value": "1.5.0" }, { "version_affected": "<", "version_name": "1.5.1", "version_value": "1.5.1" } ] } }, { "product_name": "Badge Designer Lite For WooCommerce", "version": { "version_data": [ { "version_affected": ">=", "version_name": "1.1.0", "version_value": "1.1.0" }, { "version_affected": "<", "version_name": "1.1.1", "version_value": "1.1.1" } ] } }, { "product_name": "WordPress Slider Plugin – WP 1 Slider", "version": { "version_data": [ { "version_affected": ">=", "version_name": "1.2.9", "version_value": "1.2.9" }, { "version_affected": "<", "version_name": "1.3.0", "version_value": "1.3.0" } ] } }, { "product_name": "Plugin to Manage / Design WordPress Blog – WP Blog Manager Lite", "version": { "version_data": [ { "version_affected": ">=", "version_name": "1.1.1", "version_value": "1.1.1" }, { "version_affected": "<", "version_name": "1.1.2", "version_value": "1.1.2" } ] } }, { "product_name": "Smartest Way To Design & Customize WordPress Comments & Comment Form – WP Comment Designer Lite", "version": { "version_data": [ { "version_affected": ">=", "version_name": "2.0.3", "version_value": "2.0.3" }, { "version_affected": "<", "version_name": "2.0.4", "version_value": "2.0.4" } ] } }, { "product_name": "Cookie Notification Plugin for WordPress – WP Cookie User Info", "version": { "version_data": [ { "version_affected": ">=", "version_name": "1.0.7", "version_value": "1.0.7" }, { "version_affected": "<", "version_name": "1.0.8", "version_value": "1.0.8" } ] } }, { "product_name": "Social Review", "version": { "version_data": [ { "version_affected": "<", "version_name": "1.0.9", "version_value": "1.0.9" } ] } }, { "product_name": "MContact Button", "version": { "version_data": [ { "version_affected": "<", "version_name": "2.0.7", "version_value": "2.0.7" } ] } }, { "product_name": "WP Floating Menu – One page navigator, sticky menu for WordPress", "version": { "version_data": [ { "version_affected": ">=", "version_name": "1.4.4", "version_value": "1.4.4" }, { "version_affected": "<", "version_name": "1.4.5", "version_value": "1.4.5" } ] } }, { "product_name": "The Easiest WordPress Media Manager Plugin – WP Media Manager Lite", "version": { "version_data": [ { "version_affected": ">=", "version_name": "1.1.2", "version_value": "1.1.2" }, { "version_affected": "<", "version_name": "1.1.3", "version_value": "1.1.3" } ] } }, { "product_name": "WP Popup Banners", "version": { "version_data": [ { "version_affected": ">=", "version_name": "1.2.3", "version_value": "1.2.3" }, { "version_affected": "<", "version_name": "1.2.4", "version_value": "1.2.4" } ] } }, { "product_name": "WP Popup Lite – Responsive popup plugin for WordPress", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.0.8", "version_value": "1.0.8" } ] } }, { "product_name": "Responsive Products Showcase Listing for WordPress – WP Product Gallery Lite", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.1.1", "version_value": "1.1.1" } ] } }, { "product_name": "accessbuddy", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.0.0", "version_value": "1.0.0" } ] } }, { "product_name": "Accesspress Basic", "version": { "version_data": [ { "version_affected": "=", "version_name": "3.2.1", "version_value": "3.2.1" } ] } }, { "product_name": "Accesspress Lite", "version": { "version_data": [ { "version_affected": "=", "version_name": "2.92", "version_value": "2.92" } ] } }, { "product_name": "Accesspress Mag", "version": { "version_data": [ { "version_affected": "=", "version_name": "2.6.5", "version_value": "2.6.5" } ] } }, { "product_name": "AccessPress Parallax", "version": { "version_data": [ { "version_affected": "=", "version_name": "4.5", "version_value": "4.5" } ] } }, { "product_name": "accesspress-ray", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.19.5", "version_value": "1.19.5" } ] } }, { "product_name": "AccessPress Root", "version": { "version_data": [ { "version_affected": "=", "version_name": "2.5", "version_value": "2.5" } ] } }, { "product_name": "AccessPress Staple", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.9.1", "version_value": "1.9.1" } ] } }, { "product_name": "AccessPress Store", "version": { "version_data": [ { "version_affected": "=", "version_name": "2.4.9", "version_value": "2.4.9" } ] } }, { "product_name": "Agency Lite", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.1.6", "version_value": "1.1.6" } ] } }, { "product_name": "Aplite", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.0.6", "version_value": "1.0.6" } ] } }, { "product_name": "Bingle", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.0.4", "version_value": "1.0.4" } ] } }, { "product_name": "Bloger", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.2.6", "version_value": "1.2.6" } ] } }, { "product_name": "Construction Lite", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.2.5", "version_value": "1.2.5" } ] } }, { "product_name": "Doko", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.0.27", "version_value": "1.0.27" } ] } }, { "product_name": "Enlighten", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.3.5", "version_value": "1.3.5" } ] } }, { "product_name": "FashStore", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.2.1", "version_value": "1.2.1" } ] } }, { "product_name": "FotoGraphy", "version": { "version_data": [ { "version_affected": "=", "version_name": "2.4.0", "version_value": "2.4.0" } ] } }, { "product_name": "Gaga Corp", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.0.8", "version_value": "1.0.8" } ] } }, { "product_name": "Gaga Lite", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.4.2", "version_value": "1.0.8" } ] } }, { "product_name": "One Paze", "version": { "version_data": [ { "version_affected": "=", "version_name": "2.2.8", "version_value": "2.2.8" } ] } }, { "product_name": "parallax-blog", "version": { "version_data": [ { "version_affected": "=", "version_name": "3.1.1574941215", "version_value": "3.1.1574941215" } ] } }, { "product_name": "ParallaxSome", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.3.6", "version_value": "1.3.6" } ] } }, { "product_name": "Punte", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.1.2", "version_value": "1.1.2" } ] } }, { "product_name": "Revolve", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.3.1", "version_value": "1.3.1" } ] } }, { "product_name": "Ripple", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.2.0", "version_value": "1.2.0" } ] } }, { "product_name": "ScrollMe", "version": { "version_data": [ { "version_affected": "=", "version_name": "2.1.0", "version_value": "2.1.0" } ] } }, { "product_name": "SportsMag", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.2.1", "version_value": "1.2.1" } ] } }, { "product_name": "StoreVilla", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.4.1", "version_value": "1.4.1" } ] } }, { "product_name": "Swing Lite", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.1.9", "version_value": "1.1.9" } ] } }, { "product_name": "The Launcher", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.3.2", "version_value": "1.3.2" } ] } }, { "product_name": "The Monday", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.4.1", "version_value": "1.4.1" } ] } }, { "product_name": "Uncode Lite", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.3.1", "version_value": "1.3.1" } ] } }, { "product_name": "Unicon Lite", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.2.6", "version_value": "1.2.6" } ] } }, { "product_name": "VMag", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.2.7", "version_value": "1.2.7" } ] } }, { "product_name": "VMagazine Lite", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.3.5", "version_value": "1.3.5" } ] } }, { "product_name": "Vmagazine News", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.0.5", "version_value": "1.0.5" } ] } }, { "product_name": "Zigcy Baby", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.0.6", "version_value": "1.0.6" } ] } }, { "product_name": "Zigcy Cosmetics", "version": { "version_data": [ { "version_affected": "=", "version_name": "1.0.5", "version_value": "1.0.5" } ] } }, { "product_name": "Zigcy Lite", "version": { "version_data": [ { "version_affected": "=", "version_name": "2.0.9", "version_value": "2.0.9" } ] } } ] } } ] } }, "description": { "description_data": [ { "lang": "eng", "value": "Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusion" } ] }, "references": { "reference_data": [ { "refsource": "MISC", "url": "https://wpscan.com/vulnerability/9c76bada-fa32-4c2f-9855-d0efd1e63eff", "name": "https://wpscan.com/vulnerability/9c76bada-fa32-4c2f-9855-d0efd1e63eff" }, { "refsource": "MISC", "url": "https://jetpack.com/2022/01/18/backdoor-found-in-themes-and-plugins-from-accesspress-themes/", "name": "https://jetpack.com/2022/01/18/backdoor-found-in-themes-and-plugins-from-accesspress-themes/" } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "value": "CWE-912 Hidden Functionality", "lang": "eng" } ] } ] }, "credit": [ { "lang": "eng", "value": "Harald Eilertsen (Jetpack Scan)" } ], "source": { "discovery": "EXTERNAL" } }