CVE-2021-24867: Backdoored Plugins & Themes from AccessPress Themes
Published Feb 21, 2022
·Updated
Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusion
Affected Software
93 affected components
Accesspressthemes Accessbuddy Wordpress=1.0.0
Accesspressthemes Accesspress Anonymous Post Wordpress=2.8.0
Accesspressthemes Accesspress Basic Wordpress=3.2.1
Accesspressthemes Accesspress Custom Css Wordpress=2.0.1
Accesspressthemes Accesspress Custom Post Type Wordpress=1.0.8
Accesspressthemes Accesspress Ifeeds Wordpress=4.0.3
Accesspressthemes Accesspress Lite Wordpress=2.92
Accesspressthemes Accesspress Mag Wordpress=2.6.5
Accesspressthemes Accesspress Parallax Wordpress=4.5
Accesspressthemes Accesspress Ray Wordpress=1.19.5
Accesspressthemes Accesspress Root Wordpress=2.5
Accesspressthemes Accesspress Social Counter Wordpress=1.9.1
Accesspressthemes Accesspress Social Icons Wordpress=1.8.2
Accesspressthemes Accesspress Social Login Lite Wordpress=3.4.7
Accesspressthemes Accesspress Social Share Wordpress=4.5.5
Accesspressthemes Accesspress Staple Wordpress=1.9.1
Accesspressthemes Accesspress Store Wordpress=2.4.9
Accesspressthemes Agency Lite Wordpress=1.1.6
Accesspressthemes Ap Companion Wordpress<1.0.7
Accesspressthemes Ap Contact Form Wordpress=1.0.6
Accesspressthemes Ap Custom Testimonial Wordpress=1.4.6
Accesspressthemes Ap Mega Menu Wordpress=3.0.5
Accesspressthemes Ap Pricing Tables Lite Wordpress=1.1.2
Accesspressthemes Apex Notification Bar Lite Wordpress=2.0.4
Accesspressthemes Aplite Wordpress=1.0.6
Accesspressthemes Badge Designer Lite For Woocommerce Wordpress=1.1.0
Accesspressthemes Bingle Wordpress=1.0.4
Accesspressthemes Bloger Wordpress=1.2.6
Accesspressthemes Comments Disable - Accesspress Wordpress=1.0.7
Accesspressthemes Construction Lite Wordpress=1.2.5
Accesspressthemes Doko Wordpress=1.0.27
Accesspressthemes Easy Side Tab Wordpress=1.0.7
Accesspressthemes Enlighten Wordpress=1.3.5
Accesspressthemes Everest Admin Theme Lite Wordpress=1.0.7
Accesspressthemes Everest Coming Soon Lite Wordpress=1.1.0
Accesspressthemes Everest Comment Rating Lite Wordpress=2.0.4
Accesspressthemes Everest Counter Lite Wordpress=2.0.7
Accesspressthemes Everest Faq Manager Lite Wordpress=1.0.8
Accesspressthemes Everest Gallery Lite Wordpress=1.0.8
Accesspressthemes Everest Gplaces Business Reviews Wordpress=1.0.9
Accesspressthemes Everest Review Lite Wordpress=1.0.7
Accesspressthemes Everest Tab Lite Wordpress=2.0.3
Accesspressthemes Everest Timeline Lite Wordpress=1.1.1
Accesspressthemes Fashstore Wordpress=1.2.1
Accesspressthemes Form Store To Db Wordpress=1.0.9
Accesspressthemes Fotography Wordpress=2.4.0
Accesspressthemes Gaga Corp Wordpress=1.0.8
Accesspressthemes Gaga Lite Wordpress=1.4.2
Accesspressthemes Inline Call To Action Builder Lite Wordpress=1.1.0
Accesspressthemes Mcontact Button Wordpress<2.0.7
Accesspressthemes One-paze Wordpress=2.2.8
Accesspressthemes Parallax Blog Wordpress=3.1.1574941215
Accesspressthemes Parallaxsome Wordpress=1.3.6
Accesspressthemes Pi Button Wordpress=3.3.3
Accesspressthemes Product Slider For Woocommerce Lite Wordpress=1.1.5
Accesspressthemes Punte Wordpress=1.1.2
Accesspressthemes Revolve Wordpress=1.3.1
Accesspressthemes Ripple Wordpress=1.2.0
Accesspressthemes Scrollme Wordpress=2.1.0
Accesspressthemes Smart Logo Showcase Lite Wordpress=1.1.7
Accesspressthemes Smart Scroll Posts Wordpress=2.0.8
Accesspressthemes Smart Scroll To Top Lite Wordpress=1.0.3
Accesspressthemes Social Auto Poster Wordpress=2.1.3
Accesspressthemes Social Review Wordpress<1.0.9
Accesspressthemes Sportsmag Wordpress=1.2.1
Accesspressthemes Storevilla Wordpress=1.4.1
Accesspressthemes Swing Lite Wordpress=1.1.9
Accesspressthemes Tauto Poster Wordpress=1.4.5
Accesspressthemes The Launcher Wordpress=1.3.2
Accesspressthemes The Monday Wordpress=1.4.1
Accesspressthemes Total Gdpr Compliance Lite Wordpress=1.0.4
Accesspressthemes Total Team Lite Wordpress=1.1.1
Accesspressthemes Ultimate-form-builder-lite Wordpress=1.5.0
Accesspressthemes Ultimate Author Box Lite Wordpress=1.1.2
Accesspressthemes Uncode Lite Wordpress=1.3.1
Accesspressthemes Unicon Lite Wordpress=1.2.6
Accesspressthemes Vmag Wordpress=1.2.7
Accesspressthemes Vmagazine Lite Wordpress=1.3.5
Accesspressthemes Vmagazine News Wordpress=1.0.5
Accesspressthemes Wp 1 Slider Wordpress=1.2.9
Accesspressthemes Wp Blog Manager Lite Wordpress=1.1.0
Accesspressthemes Wp Comment Designer Lite Wordpress=2.0.3
Accesspressthemes Wp Cookie User Info Wordpress=1.0.7
Accesspressthemes Wp Floating Menu Wordpress=1.4.4
Accesspressthemes Wp Media Manager Lite Wordpress=1.1.2
Accesspressthemes Wp Menu Icons Lite Wordpress<1.0.9
Accesspressthemes Wp Popup Banners Wordpress=1.2.3
Accesspressthemes Wp Popup Lite Wordpress=1.0.8
Accesspressthemes Wp Product Gallery Lite Wordpress=1.1.1
Accesspressthemes Wp Tfeed Wordpress=1.6.7
Accesspressthemes Zigcy Baby Wordpress=1.0.6
Accesspressthemes Zigcy Cosmetics Wordpress=1.0.5
Accesspressthemes Zigcy Lite Wordpress=2.0.9
Event History
Feb 21, 2022
CVE Published
via MITRE·10:45 AM
Data Sourced
via MITRE·10:45 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-24867?
CVE-2021-24867 is considered a high severity vulnerability due to the presence of backdoors in various plugins and themes.
2
How do I fix CVE-2021-24867?
To fix CVE-2021-24867, users should uninstall the affected plugins and themes from AccessPress Themes and replace them with clean versions from trusted sources.
3
Which versions are affected by CVE-2021-24867?
CVE-2021-24867 affects specific versions of various plugins and themes from AccessPress Themes, particularly those downloaded from their official site.
4
How can I tell if my site is compromised by CVE-2021-24867?
Check for unauthorized changes or suspicious files in your WordPress installation, as CVE-2021-24867 may indicate a backdoor presence.
5
Are plugins from other sources affected by CVE-2021-24867?
No, only plugins and themes downloaded directly from the AccessPress Themes website are affected by CVE-2021-24867, while those from wordpress.org are safe.