Description (CNA)
Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusion
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| AccessPress Themes / Frontend Post WordPress Plugin – AccessPress Anonymous Post | affected 2.8.0 before 2.8.0*; affected 2.8.1 before 2.8.1 |
| AccessPress Themes / AccessPress Custom CSS | affected 2.0.1 before 2.0.1*; affected 2.0.2 before 2.0.2 |
| AccessPress Themes / AccessPress Custom Post Type | affected 1.0.8 before 1.0.8*; affected 1.0.9 before 1.0.9 |
| AccessPress Themes / Social Auto Poster | affected 2.1.3 before 2.1.3*; affected 2.1.4 before 2.1.4 |
| AccessPress Themes / AccessPress iFeeds | affected 4.0.3 before 4.0.3*; affected 4.0.4 before 4.0.4 |
| AccessPress Themes / PI Button | affected 3.3.3 before 3.3.3*; affected 3.3.4 before 3.3.4 |
| AccessPress Themes / AccessPress Social Counter | affected 1.9.1 before 1.9.1*; affected 1.9.2 before 1.9.2 |
| AccessPress Themes / AccessPress Social Icons | affected 1.8.2 before 1.8.2*; affected 1.8.3 before 1.8.3 |
| AccessPress Themes / AccessPress Social Login Lite – Social Login WordPress Plugin | affected 3.4.7 before 3.4.7*; affected 3.4.8 before 3.4.8 |
| AccessPress Themes / AccessPress Social Share | affected 4.5.5 before 4.5.5*; affected 4.5.6 before 4.5.6 |
| AccessPress Themes / TAuto Poster | affected 1.4.5 before 1.4.5*; affected 1.4.6 before 1.4.6 |
| AccessPress Themes / WP TFeed | affected 1.6.7 before 1.6.7*; affected 1.6.8 before 1.6.8 |
| AccessPress Themes / Effectively Add & Customize Free Icons For WordPress Menus – WP Menu Icons Lite | affected 1.0.9 before 1.0.9 |
| AccessPress Themes / AP Companion | affected 1.0.7 before 1.0.7 |
| AccessPress Themes / Easiest Contact Form for WordPress – AP Contact Form | affected 1.0.6 before 1.0.6*; affected 1.0.7 before 1.0.7 |
| AccessPress Themes / Testimonial WordPress Plugin – AP Custom Testimonial | affected 1.4.6 before 1.4.6*; affected 1.4.7 before 1.4.7 |
| AccessPress Themes / Mega Menu Plugin for WordPress – AP Mega Menu | affected 3.0.5 before 3.0.5*; affected 3.0.6 before 3.0.6 |
| AccessPress Themes / Pricing Table Builder – AP Pricing Tables Lite | affected 1.1.3 before 1.1.3* |
| AccessPress Themes / Responsive Notification Bar Plugin for WordPress – Apex Notification Bar Lite | affected 2.0.4 before 2.0.4*; affected 2.0.5 before 2.0.5 |
| AccessPress Themes / Form Store to DB | affected 1.0.9 before 1.0.9*; affected 1.1.0 before 1.1.0 |
| AccessPress Themes / Comments Disable – AccessPress | affected 1.0.7 before 1.0.7*; affected 1.0.8 before 1.0.8 |
| AccessPress Themes / CTA plugin for WordPress – Easy Side Tab | affected 1.0.7 before 1.0.7*; affected 1.0.8 before 1.0.8 |
| AccessPress Themes / WordPress Backend Customizer – Everest Admin Theme Lite | affected 1.0.7 before 1.0.7*; affected 1.0.8 before 1.0.8 |
| AccessPress Themes / Ultimate Coming Soon, Maintenance Mode Plugin for WordPress – Everest Coming Soon Lite | affected 1.1.0 before 1.1.0*; affected 1.1.1 before 1.1.1 |
| AccessPress Themes / Free WordPress Plugin To Display Like/Dislike Comment Rating – Everest Comment Rating Lite | affected 2.0.4 before 2.0.4*; affected 2.0.5 before 2.0.5 |
| AccessPress Themes / Beautiful Stat Counter Plugin for WordPress – Everest Counter Lite | affected 2.0.7 before 2.0.7*; affected 2.0.8 before 2.0.8 |
| AccessPress Themes / Beautiful FAQ Plugin for WordPress – Everest FAQ Manager Lite | affected 1.0.8 before 1.0.8*; affected 1.0.9 before 1.0.9 |
| AccessPress Themes / Responsive Media Gallery Plugin for WordPress – Everest Gallery Lite | affected 1.0.8 before 1.0.8*; affected 1.0.9 before 1.0.9 |
| AccessPress Themes / Everest GPlaces Business Reviews | affected 1.0.9 before 1.0.9*; affected 2.0.0 before 2.0.0 |
| AccessPress Themes / Everest Review Lite – User/Admin review plugin for WordPress | affected 1.0.7 |
| AccessPress Themes / Free Responsive Tab Plugin For WordPress – Everest Tab Lite | affected 2.0.3 before 2.0.3*; affected 2.0.4 before 2.0.4 |
| AccessPress Themes / Responsive WordPress Timeline Plugin – Everest Timeline Lite | affected 1.1.1 before 1.1.1*; affected 1.1.2 before 1.1.2 |
| AccessPress Themes / Inline Call To Action Builder Lite – Free Call To Action Layer Plugin for WordPress | affected 1.1.0 before 1.1.0*; affected 1.1.1 before 1.1.1 |
| AccessPress Themes / Product Slider For WooCommerce Lite | affected 1.1.5 before 1.1.5*; affected 1.1.6 before 1.1.6 |
| AccessPress Themes / Responsive Clients Logo Gallery Plugin for WordPress – Smart Logo Showcase Lite | affected 1.1.7 before 1.1.7*; affected 1.1.8 before 1.1.8 |
| AccessPress Themes / Smart Scroll Posts for WordPress | affected 2.0.8 before 2.0.8*; affected 2.0.9 before 2.0.9 |
| AccessPress Themes / Faster and Easier scroll to Top Plugin for WordPress – Smart Scroll to Top Lite | affected 1.0.3 before 1.0.3*; affected 1.0.4 before 1.0.4 |
| AccessPress Themes / Total GDPR Compliance Lite – WordPress Plugin for GDPR Compatibility | affected 1.0.4 |
| AccessPress Themes / Total Team Lite – Responsive Team Manager / Showcase Plugin for WordPress | affected 1.1.1 before 1.1.1*; affected 1.1.2 before 1.1.2 |
| AccessPress Themes / Free Responsive Post/Article Author Section Plugin for WordPress – Ultimate Author Box Lite | affected 1.1.2 before 1.1.2*; affected 1.1.3 before 1.1.3 |
| AccessPress Themes / Contact Form for WordPress – Ultimate Form Builder Lite | affected 1.5.0 before 1.5.0*; affected 1.5.1 before 1.5.1 |
| AccessPress Themes / Badge Designer Lite For WooCommerce | affected 1.1.0 before 1.1.0*; affected 1.1.1 before 1.1.1 |
| AccessPress Themes / WordPress Slider Plugin – WP 1 Slider | affected 1.2.9 before 1.2.9*; affected 1.3.0 before 1.3.0 |
| AccessPress Themes / Plugin to Manage / Design WordPress Blog – WP Blog Manager Lite | affected 1.1.1 before 1.1.1*; affected 1.1.2 before 1.1.2 |
| AccessPress Themes / Smartest Way To Design & Customize WordPress Comments & Comment Form – WP Comment Designer Lite | affected 2.0.3 before 2.0.3*; affected 2.0.4 before 2.0.4 |
| AccessPress Themes / Cookie Notification Plugin for WordPress – WP Cookie User Info | affected 1.0.7 before 1.0.7*; affected 1.0.8 before 1.0.8 |
| AccessPress Themes / Social Review | affected 1.0.9 before 1.0.9 |
| AccessPress Themes / MContact Button | affected 2.0.7 before 2.0.7 |
| AccessPress Themes / WP Floating Menu – One page navigator, sticky menu for WordPress | affected 1.4.4 before 1.4.4*; affected 1.4.5 before 1.4.5 |
| AccessPress Themes / The Easiest WordPress Media Manager Plugin – WP Media Manager Lite | affected 1.1.2 before 1.1.2*; affected 1.1.3 before 1.1.3 |
| AccessPress Themes / WP Popup Banners | affected 1.2.3 before 1.2.3*; affected 1.2.4 before 1.2.4 |
| AccessPress Themes / WP Popup Lite – Responsive popup plugin for WordPress | affected 1.0.8 |
| AccessPress Themes / Responsive Products Showcase Listing for WordPress – WP Product Gallery Lite | affected 1.1.1 |
| AccessPress Themes / accessbuddy | affected 1.0.0 |
| AccessPress Themes / Accesspress Basic | affected 3.2.1 |
| AccessPress Themes / Accesspress Lite | affected 2.92 |
| AccessPress Themes / Accesspress Mag | affected 2.6.5 |
| AccessPress Themes / AccessPress Parallax | affected 4.5 |
| AccessPress Themes / accesspress-ray | affected 1.19.5 |
| AccessPress Themes / AccessPress Root | affected 2.5 |
| AccessPress Themes / AccessPress Staple | affected 1.9.1 |
| AccessPress Themes / AccessPress Store | affected 2.4.9 |
| AccessPress Themes / Agency Lite | affected 1.1.6 |
| AccessPress Themes / Aplite | affected 1.0.6 |
| AccessPress Themes / Bingle | affected 1.0.4 |
| AccessPress Themes / Bloger | affected 1.2.6 |
| AccessPress Themes / Construction Lite | affected 1.2.5 |
| AccessPress Themes / Doko | affected 1.0.27 |
| AccessPress Themes / Enlighten | affected 1.3.5 |
| AccessPress Themes / FashStore | affected 1.2.1 |
| AccessPress Themes / FotoGraphy | affected 2.4.0 |
| AccessPress Themes / Gaga Corp | affected 1.0.8 |
| AccessPress Themes / Gaga Lite | affected 1.4.2 1.0.8 |
| AccessPress Themes / One Paze | affected 2.2.8 |
| AccessPress Themes / parallax-blog | affected 3.1.1574941215 |
| AccessPress Themes / ParallaxSome | affected 1.3.6 |
| AccessPress Themes / Punte | affected 1.1.2 |
| AccessPress Themes / Revolve | affected 1.3.1 |
| AccessPress Themes / Ripple | affected 1.2.0 |
| AccessPress Themes / ScrollMe | affected 2.1.0 |
| AccessPress Themes / SportsMag | affected 1.2.1 |
| AccessPress Themes / StoreVilla | affected 1.4.1 |
| AccessPress Themes / Swing Lite | affected 1.1.9 |
| AccessPress Themes / The Launcher | affected 1.3.2 |
| AccessPress Themes / The Monday | affected 1.4.1 |
| AccessPress Themes / Uncode Lite | affected 1.3.1 |
| AccessPress Themes / Unicon Lite | affected 1.2.6 |
| AccessPress Themes / VMag | affected 1.2.7 |
| AccessPress Themes / VMagazine Lite | affected 1.3.5 |
| AccessPress Themes / Vmagazine News | affected 1.0.5 |
| AccessPress Themes / Zigcy Baby | affected 1.0.6 |
| AccessPress Themes / Zigcy Cosmetics | affected 1.0.5 |
| AccessPress Themes / Zigcy Lite | affected 2.0.9 |
CWE
CWE-912
References
- https://wpscan.com/vulnerability/9c76bada-fa32-4c2f-9855-d0efd1e63eff
- https://jetpack.com/2022/01/18/backdoor-found-in-themes-and-plugins-from-accesspress-themes/
ADP enrichment
No English description supplied.