NetSight
IP …
critical9.8

CVE-2021-24867

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised.

Impact

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusion

Affected products

VendorProductAffected versions
AccesspressthemesAccessbuddy
Version 1.0.0
AccesspressthemesAccesspress Anonymous Post
Version 2.8.0
AccesspressthemesAccesspress Basic
Version 3.2.1
AccesspressthemesAccesspress Custom Css
Version 2.0.1
AccesspressthemesAccesspress Custom Post Type
Version 1.0.8
AccesspressthemesAccesspress Ifeeds
Version 4.0.3
AccesspressthemesAccesspress Lite
Version 2.92
AccesspressthemesAccesspress Mag
Version 2.6.5
AccesspressthemesAccesspress Parallax
Version 4.5
AccesspressthemesAccesspress Ray
Version 1.19.5
AccesspressthemesAccesspress Root
Version 2.5
AccesspressthemesAccesspress Social Counter
Version 1.9.1

Weakness classification

CWE-912

References