01 Record
CVE-2021-24867
Backdoored Plugins & Themes from AccessPress Themes
UnratedPUBLISHEDCNA: WPScan
CNA base scoreUnratedNo CNA CVSS vector
02 Description
Backdoored Plugins & Themes from AccessPress Themes
03 Exploitation and scoring
- Exploitation
- Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
- SSVC decision
- Not assessed by CISA
- EPSS probability
- 18.04% probability of exploitation activity in the next 30 days.
- EPSS percentile
- Equal to or higher than the score of 97.0% of scored records. A rank, not a probability.
- NVD base score
- 9.8 (CVSS v3.x), scored by the NVD independently of the CNA.
- NVD CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- NVD analysis status
- Modified. NVD last modified this record on 2026-06-17.
- Red Hat severity
- No Red Hat rating. Red Hat rates the CVEs that affect its products.
Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.
04 Metadata
- Published
- 2022-02-21 10:45Z4 YR AGO
- Last updated
- 2024-08-03 19:49Z2 YR AGO
- Reserved
- 2021-01-14
- Assigning CNA
- WPScan
- Record state
- PUBLISHED
- Severity
- Not rated by the issuing CNA
- CNA CVSS vector
- Not published by the issuing CNA
- Weaknesses
- CWE-912Hidden FunctionalityClass
- Data version
- 5.1
- Document digest
- ee4ca6a8de46330827eca02f9c8e82298f20712686a1f242b5c7d24d57755888
05 Affected products
VendorProductVersionsPlatforms
AccessPress ThemesFrontend Post WordPress Plugin – AccessPress Anonymous Post2.8.0 to < 2.8.0*, 2.8.1 to < 2.8.1—
AccessPress ThemesAccessPress Social Login Lite – Social Login WordPress Plugin3.4.7 to < 3.4.7*, 3.4.8 to < 3.4.8—
AccessPress ThemesEffectively Add & Customize Free Icons For WordPress Menus – WP Menu Icons Lite1.0.9 to < 1.0.9—
AccessPress ThemesEasiest Contact Form for WordPress – AP Contact Form1.0.6 to < 1.0.6*, 1.0.7 to < 1.0.7—
AccessPress ThemesTestimonial WordPress Plugin – AP Custom Testimonial1.4.6 to < 1.4.6*, 1.4.7 to < 1.4.7—
AccessPress ThemesResponsive Notification Bar Plugin for WordPress – Apex Notification Bar Lite2.0.4 to < 2.0.4*, 2.0.5 to < 2.0.5—
AccessPress ThemesWordPress Backend Customizer – Everest Admin Theme Lite1.0.7 to < 1.0.7*, 1.0.8 to < 1.0.8—
AccessPress ThemesUltimate Coming Soon, Maintenance Mode Plugin for WordPress – Everest Coming Soon Lite1.1.0 to < 1.1.0*, 1.1.1 to < 1.1.1—
AccessPress ThemesFree WordPress Plugin To Display Like/Dislike Comment Rating – Everest Comment Rating Lite2.0.4 to < 2.0.4*, 2.0.5 to < 2.0.5—
AccessPress ThemesBeautiful Stat Counter Plugin for WordPress – Everest Counter Lite2.0.7 to < 2.0.7*, 2.0.8 to < 2.0.8—
AccessPress ThemesBeautiful FAQ Plugin for WordPress – Everest FAQ Manager Lite1.0.8 to < 1.0.8*, 1.0.9 to < 1.0.9—
AccessPress ThemesResponsive Media Gallery Plugin for WordPress – Everest Gallery Lite1.0.8 to < 1.0.8*, 1.0.9 to < 1.0.9—
AccessPress ThemesFree Responsive Tab Plugin For WordPress – Everest Tab Lite2.0.3 to < 2.0.3*, 2.0.4 to < 2.0.4—
AccessPress ThemesResponsive WordPress Timeline Plugin – Everest Timeline Lite1.1.1 to < 1.1.1*, 1.1.2 to < 1.1.2—
AccessPress ThemesInline Call To Action Builder Lite – Free Call To Action Layer Plugin for WordPress1.1.0 to < 1.1.0*, 1.1.1 to < 1.1.1—
AccessPress ThemesResponsive Clients Logo Gallery Plugin for WordPress – Smart Logo Showcase Lite1.1.7 to < 1.1.7*, 1.1.8 to < 1.1.8—
AccessPress ThemesFaster and Easier scroll to Top Plugin for WordPress – Smart Scroll to Top Lite1.0.3 to < 1.0.3*, 1.0.4 to < 1.0.4—
AccessPress ThemesTotal Team Lite – Responsive Team Manager / Showcase Plugin for WordPress1.1.1 to < 1.1.1*, 1.1.2 to < 1.1.2—
AccessPress ThemesFree Responsive Post/Article Author Section Plugin for WordPress – Ultimate Author Box Lite1.1.2 to < 1.1.2*, 1.1.3 to < 1.1.3—
AccessPress ThemesContact Form for WordPress – Ultimate Form Builder Lite1.5.0 to < 1.5.0*, 1.5.1 to < 1.5.1—
AccessPress ThemesPlugin to Manage / Design WordPress Blog – WP Blog Manager Lite1.1.1 to < 1.1.1*, 1.1.2 to < 1.1.2—
AccessPress ThemesSmartest Way To Design & Customize WordPress Comments & Comment Form – WP Comment Designer Lite2.0.3 to < 2.0.3*, 2.0.4 to < 2.0.4—
AccessPress ThemesCookie Notification Plugin for WordPress – WP Cookie User Info1.0.7 to < 1.0.7*, 1.0.8 to < 1.0.8—
AccessPress ThemesWP Floating Menu – One page navigator, sticky menu for WordPress1.4.4 to < 1.4.4*, 1.4.5 to < 1.4.5—
AccessPress ThemesThe Easiest WordPress Media Manager Plugin – WP Media Manager Lite1.1.2 to < 1.1.2*, 1.1.3 to < 1.1.3—
AccessPress ThemesResponsive Products Showcase Listing for WordPress – WP Product Gallery Lite1.1.1—
33 further entries not shown. The complete list is in the raw JSON document.