CVE-2021-24867

Description

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusion

Affected products

• AccessPress Themes / accessbuddy1.0.0 – 1.0.0
• AccessPress Themes / accesspress-basic3.2.1 – 3.2.1
• AccessPress Themes / AccessPress Custom CSS2.0.1 – 2.0.1*
• AccessPress Themes / AccessPress Custom CSS2.0.2 – 2.0.2
• AccessPress Themes / AccessPress Custom Post Type1.0.9 – 1.0.9
• AccessPress Themes / AccessPress Custom Post Type1.0.8 – 1.0.8*
• AccessPress Themes / AccessPress iFeeds4.0.3 – 4.0.3*
• AccessPress Themes / AccessPress iFeeds4.0.4 – 4.0.4
• AccessPress Themes / accesspress-lite2.92 – 2.92
• AccessPress Themes / accesspress-mag2.6.5 – 2.6.5
• AccessPress Themes / accesspress-parallax4.5 – 4.5
• AccessPress Themes / accesspress-ray1.19.5 – 1.19.5
• AccessPress Themes / accesspress-root2.5 – 2.5
• AccessPress Themes / AccessPress Social Counter1.9.2 – 1.9.2
• AccessPress Themes / AccessPress Social Counter1.9.1 – 1.9.1*
• AccessPress Themes / AccessPress Social Icons1.8.2 – 1.8.2*
• AccessPress Themes / AccessPress Social Icons1.8.3 – 1.8.3
• AccessPress Themes / AccessPress Social Login Lite – Social Login WordPress Plugin3.4.7 – 3.4.7*
• AccessPress Themes / AccessPress Social Login Lite – Social Login WordPress Plugin3.4.8 – 3.4.8
• AccessPress Themes / AccessPress Social Share4.5.5 – 4.5.5*
• AccessPress Themes / AccessPress Social Share4.5.6 – 4.5.6
• AccessPress Themes / AccessPress Staple1.9.1 – 1.9.1
• AccessPress Themes / accesspress-store2.4.9 – 2.4.9
• AccessPress Themes / agency-lite1.1.6 – 1.1.6
• AccessPress Themes / AP Companion1.0.7 – 1.0.7
• AccessPress Themes / Aplite1.0.6 – 1.0.6
• AccessPress Themes / Badge Designer Lite For WooCommerce1.1.0 – 1.1.0*
• AccessPress Themes / Badge Designer Lite For WooCommerce1.1.1 – 1.1.1
• AccessPress Themes / Beautiful FAQ Plugin for WordPress – Everest FAQ Manager Lite1.0.8 – 1.0.8*
• AccessPress Themes / Beautiful FAQ Plugin for WordPress – Everest FAQ Manager Lite1.0.9 – 1.0.9
• AccessPress Themes / Beautiful Stat Counter Plugin for WordPress – Everest Counter Lite2.0.7 – 2.0.7*
• AccessPress Themes / Beautiful Stat Counter Plugin for WordPress – Everest Counter Lite2.0.8 – 2.0.8
• AccessPress Themes / bingle1.0.4 – 1.0.4
• AccessPress Themes / bloger1.2.6 – 1.2.6
• AccessPress Themes / Comments Disable – AccessPress1.0.7 – 1.0.7*
• AccessPress Themes / Comments Disable – AccessPress1.0.8 – 1.0.8
• AccessPress Themes / construction-lite1.2.5 – 1.2.5
• AccessPress Themes / Contact Form for WordPress – Ultimate Form Builder Lite1.5.1 – 1.5.1
• AccessPress Themes / Contact Form for WordPress – Ultimate Form Builder Lite1.5.0 – 1.5.0*
• AccessPress Themes / Cookie Notification Plugin for WordPress – WP Cookie User Info1.0.8 – 1.0.8
• AccessPress Themes / Cookie Notification Plugin for WordPress – WP Cookie User Info1.0.7 – 1.0.7*
• AccessPress Themes / CTA plugin for WordPress – Easy Side Tab1.0.7 – 1.0.7*
• AccessPress Themes / CTA plugin for WordPress – Easy Side Tab1.0.8 – 1.0.8
• AccessPress Themes / doko1.0.27 – 1.0.27
• AccessPress Themes / Easiest Contact Form for WordPress – AP Contact Form1.0.7 – 1.0.7
• AccessPress Themes / Easiest Contact Form for WordPress – AP Contact Form1.0.6 – 1.0.6*
• AccessPress Themes / Effectively Add & Customize Free Icons For WordPress Menus – WP Menu Icons Lite1.0.9 – 1.0.9
• AccessPress Themes / enlighten1.3.5 – 1.3.5
• AccessPress Themes / Everest GPlaces Business Reviews1.0.9 – 1.0.9*
• AccessPress Themes / Everest GPlaces Business Reviews2.0.0 – 2.0.0
• AccessPress Themes / Everest Review Lite – User/Admin review plugin for WordPress1.0.7 – 1.0.7
• AccessPress Themes / FashStore1.2.1 – 1.2.1
• AccessPress Themes / Faster and Easier scroll to Top Plugin for WordPress – Smart Scroll to Top Lite1.0.3 – 1.0.3*
• AccessPress Themes / Faster and Easier scroll to Top Plugin for WordPress – Smart Scroll to Top Lite1.0.4 – 1.0.4
• AccessPress Themes / Form Store to DB1.0.9 – 1.0.9*
• AccessPress Themes / Form Store to DB1.1.0 – 1.1.0
• AccessPress Themes / fotography2.4.0 – 2.4.0
• AccessPress Themes / Free Responsive Post/Article Author Section Plugin for WordPress – Ultimate Author Box Lite1.1.2 – 1.1.2*
• AccessPress Themes / Free Responsive Post/Article Author Section Plugin for WordPress – Ultimate Author Box Lite1.1.3 – 1.1.3
• AccessPress Themes / Free Responsive Tab Plugin For WordPress – Everest Tab Lite2.0.4 – 2.0.4
• AccessPress Themes / Free Responsive Tab Plugin For WordPress – Everest Tab Lite2.0.3 – 2.0.3*
• AccessPress Themes / Free WordPress Plugin To Display Like/Dislike Comment Rating – Everest Comment Rating Lite2.0.5 – 2.0.5
• AccessPress Themes / Free WordPress Plugin To Display Like/Dislike Comment Rating – Everest Comment Rating Lite2.0.4 – 2.0.4*
• AccessPress Themes / Frontend Post WordPress Plugin – AccessPress Anonymous Post2.8.0 – 2.8.0*
• AccessPress Themes / Frontend Post WordPress Plugin – AccessPress Anonymous Post2.8.1 – 2.8.1
• AccessPress Themes / Gaga Corp1.0.8 – 1.0.8
• AccessPress Themes / Gaga Lite1.4.2 1.0.8 – 1.4.2 1.0.8
• AccessPress Themes / Inline Call To Action Builder Lite – Free Call To Action Layer Plugin for WordPress1.1.0 – 1.1.0*
• AccessPress Themes / Inline Call To Action Builder Lite – Free Call To Action Layer Plugin for WordPress1.1.1 – 1.1.1
• AccessPress Themes / MContact Button2.0.7 – 2.0.7
• AccessPress Themes / Mega Menu Plugin for WordPress – AP Mega Menu3.0.6 – 3.0.6
• AccessPress Themes / Mega Menu Plugin for WordPress – AP Mega Menu3.0.5 – 3.0.5*
• AccessPress Themes / One Paze2.2.8 – 2.2.8
• AccessPress Themes / parallax-blog3.1.1574941215 – 3.1.1574941215
• AccessPress Themes / parallaxsome1.3.6 – 1.3.6
• AccessPress Themes / PI Button3.3.3 – 3.3.3*
• AccessPress Themes / PI Button3.3.4 – 3.3.4
• AccessPress Themes / Plugin to Manage / Design WordPress Blog – WP Blog Manager Lite1.1.2 – 1.1.2
• AccessPress Themes / Plugin to Manage / Design WordPress Blog – WP Blog Manager Lite1.1.1 – 1.1.1*
• AccessPress Themes / Pricing Table Builder – AP Pricing Tables Lite1.1.3 – 1.1.3*
• AccessPress Themes / Product Slider For WooCommerce Lite1.1.6 – 1.1.6
• AccessPress Themes / Product Slider For WooCommerce Lite1.1.5 – 1.1.5*
• AccessPress Themes / punte1.1.2 – 1.1.2
• AccessPress Themes / Responsive Clients Logo Gallery Plugin for WordPress – Smart Logo Showcase Lite1.1.8 – 1.1.8
• AccessPress Themes / Responsive Clients Logo Gallery Plugin for WordPress – Smart Logo Showcase Lite1.1.7 – 1.1.7*
• AccessPress Themes / Responsive Media Gallery Plugin for WordPress – Everest Gallery Lite1.0.9 – 1.0.9
• AccessPress Themes / Responsive Media Gallery Plugin for WordPress – Everest Gallery Lite1.0.8 – 1.0.8*
• AccessPress Themes / Responsive Notification Bar Plugin for WordPress – Apex Notification Bar Lite2.0.5 – 2.0.5
• AccessPress Themes / Responsive Notification Bar Plugin for WordPress – Apex Notification Bar Lite2.0.4 – 2.0.4*
• AccessPress Themes / Responsive Products Showcase Listing for WordPress – WP Product Gallery Lite1.1.1 – 1.1.1
• AccessPress Themes / Responsive WordPress Timeline Plugin – Everest Timeline Lite1.1.1 – 1.1.1*
• AccessPress Themes / Responsive WordPress Timeline Plugin – Everest Timeline Lite1.1.2 – 1.1.2
• AccessPress Themes / revolve1.3.1 – 1.3.1
• AccessPress Themes / ripple1.2.0 – 1.2.0
• AccessPress Themes / scrollme2.1.0 – 2.1.0
• AccessPress Themes / Smartest Way To Design & Customize WordPress Comments & Comment Form – WP Comment Designer Lite2.0.3 – 2.0.3*
• AccessPress Themes / Smartest Way To Design & Customize WordPress Comments & Comment Form – WP Comment Designer Lite2.0.4 – 2.0.4
• AccessPress Themes / Smart Scroll Posts for WordPress2.0.8 – 2.0.8*
• AccessPress Themes / Smart Scroll Posts for WordPress2.0.9 – 2.0.9
• AccessPress Themes / Social Auto Poster2.1.4 – 2.1.4
• AccessPress Themes / Social Auto Poster2.1.3 – 2.1.3*
• AccessPress Themes / Social Review1.0.9 – 1.0.9
• AccessPress Themes / SportsMag1.2.1 – 1.2.1
• AccessPress Themes / storevilla1.4.1 – 1.4.1
• AccessPress Themes / swing-lite1.1.9 – 1.1.9
• AccessPress Themes / TAuto Poster1.4.5 – 1.4.5*
• AccessPress Themes / TAuto Poster1.4.6 – 1.4.6
• AccessPress Themes / Testimonial WordPress Plugin – AP Custom Testimonial1.4.7 – 1.4.7
• AccessPress Themes / Testimonial WordPress Plugin – AP Custom Testimonial1.4.6 – 1.4.6*
• AccessPress Themes / The Easiest WordPress Media Manager Plugin – WP Media Manager Lite1.1.2 – 1.1.2*
• AccessPress Themes / The Easiest WordPress Media Manager Plugin – WP Media Manager Lite1.1.3 – 1.1.3
• AccessPress Themes / the-launcher1.3.2 – 1.3.2
• AccessPress Themes / the-monday1.4.1 – 1.4.1
• AccessPress Themes / Total GDPR Compliance Lite – WordPress Plugin for GDPR Compatibility1.0.4 – 1.0.4
• AccessPress Themes / Total Team Lite – Responsive Team Manager / Showcase Plugin for WordPress1.1.1 – 1.1.1*
• AccessPress Themes / Total Team Lite – Responsive Team Manager / Showcase Plugin for WordPress1.1.2 – 1.1.2
• AccessPress Themes / Ultimate Coming Soon, Maintenance Mode Plugin for WordPress – Everest Coming Soon Lite1.1.1 – 1.1.1
• AccessPress Themes / Ultimate Coming Soon, Maintenance Mode Plugin for WordPress – Everest Coming Soon Lite1.1.0 – 1.1.0*
• AccessPress Themes / uncode-lite1.3.1 – 1.3.1
• AccessPress Themes / Unicon Lite1.2.6 – 1.2.6
• AccessPress Themes / vmag1.2.7 – 1.2.7
• AccessPress Themes / vmagazine-lite1.3.5 – 1.3.5
• AccessPress Themes / vmagazine-news1.0.5 – 1.0.5
• AccessPress Themes / WordPress Backend Customizer – Everest Admin Theme Lite1.0.8 – 1.0.8
• AccessPress Themes / WordPress Backend Customizer – Everest Admin Theme Lite1.0.7 – 1.0.7*
• AccessPress Themes / WordPress Slider Plugin – WP 1 Slider1.3.0 – 1.3.0
• AccessPress Themes / WordPress Slider Plugin – WP 1 Slider1.2.9 – 1.2.9*
• AccessPress Themes / WP Floating Menu – One page navigator, sticky menu for WordPress1.4.4 – 1.4.4*
• AccessPress Themes / WP Floating Menu – One page navigator, sticky menu for WordPress1.4.5 – 1.4.5
• AccessPress Themes / WP Popup Banners1.2.3 – 1.2.3*
• AccessPress Themes / WP Popup Banners1.2.4 – 1.2.4
• AccessPress Themes / WP Popup Lite – Responsive popup plugin for WordPress1.0.8 – 1.0.8
• AccessPress Themes / WP TFeed1.6.7 – 1.6.7*
• AccessPress Themes / WP TFeed1.6.8 – 1.6.8
• AccessPress Themes / zigcy-baby1.0.6 – 1.0.6
• AccessPress Themes / zigcy-cosmetics1.0.5 – 1.0.5
• AccessPress Themes / zigcy-lite2.0.9 – 2.0.9

References

• MISChttps://wpscan.com/vulnerability/9c76bada-fa32-4c2f-9855-d0efd1e63eff
• MISChttps://jetpack.com/2022/01/18/backdoor-found-in-themes-and-plugins-from-accesspress-themes/