csirt@kutim:~/threat-intel/cve/CVE-2021-24867

Katalog CVE

CVSS 9.8 · Critical EPSS 18,0%

Kerentanan Hidden Functionality pada accesspressthemes accessbuddy, accesspressthemes accesspress anonymous post +58 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusion

Rincian

Terbit di NVD
21 Februari 2022
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-912: Hidden Functionality
EPSS (30 hari)
18,0% peluang dieksploitasi; lebih tinggi dari 97,1% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
accesspressthemes accessbuddy Versi 1.0.0
accesspressthemes accesspress anonymous post Versi 2.8.0
accesspressthemes accesspress basic Versi 3.2.1
accesspressthemes accesspress custom css Versi 2.0.1
accesspressthemes accesspress custom post type Versi 1.0.8
accesspressthemes accesspress ifeeds Versi 4.0.3
accesspressthemes accesspress lite Versi 2.92
accesspressthemes accesspress mag Versi 2.6.5
accesspressthemes accesspress parallax Versi 4.5
accesspressthemes accesspress ray Versi 1.19.5
accesspressthemes accesspress root Versi 2.5
accesspressthemes accesspress social counter Versi 1.9.1
accesspressthemes accesspress social icons Versi 1.8.2
accesspressthemes accesspress social login lite Versi 3.4.7
accesspressthemes accesspress social share Versi 4.5.5
accesspressthemes accesspress staple Versi 1.9.1
accesspressthemes accesspress store Versi 2.4.9
accesspressthemes agency lite Versi 1.1.6
accesspressthemes ap companion Semua versi sebelum 1.0.7
accesspressthemes ap contact form Versi 1.0.6
accesspressthemes ap custom testimonial Versi 1.4.6
accesspressthemes ap mega menu Versi 3.0.5
accesspressthemes ap pricing tables lite Versi 1.1.2
accesspressthemes apex notification bar lite Versi 2.0.4
accesspressthemes aplite Versi 1.0.6
accesspressthemes badge designer lite for woocommerce Versi 1.1.0
accesspressthemes bingle Versi 1.0.4
accesspressthemes bloger Versi 1.2.6
accesspressthemes comments disable - accesspress Versi 1.0.7
accesspressthemes construction lite Versi 1.2.5
accesspressthemes doko Versi 1.0.27
accesspressthemes easy side tab Versi 1.0.7
accesspressthemes enlighten Versi 1.3.5
accesspressthemes everest admin theme lite Versi 1.0.7
accesspressthemes everest coming soon lite Versi 1.1.0
accesspressthemes everest comment rating lite Versi 2.0.4
accesspressthemes everest counter lite Versi 2.0.7
accesspressthemes everest faq manager lite Versi 1.0.8
accesspressthemes everest gallery lite Versi 1.0.8
accesspressthemes everest gplaces business reviews Versi 1.0.9
accesspressthemes everest review lite Versi 1.0.7
accesspressthemes everest tab lite Versi 2.0.3
accesspressthemes everest timeline lite Versi 1.1.1
accesspressthemes fashstore Versi 1.2.1
accesspressthemes form store to db Versi 1.0.9
accesspressthemes fotography Versi 2.4.0
accesspressthemes gaga corp Versi 1.0.8
accesspressthemes gaga lite Versi 1.4.2
accesspressthemes inline call to action builder lite Versi 1.1.0
accesspressthemes mcontact button Semua versi sebelum 2.0.7
accesspressthemes one-paze Versi 2.2.8
accesspressthemes parallax blog Versi 3.1.1574941215
accesspressthemes parallaxsome Versi 1.3.6
accesspressthemes pi button Versi 3.3.3
accesspressthemes product slider for woocommerce lite Versi 1.1.5
accesspressthemes punte Versi 1.1.2
accesspressthemes revolve Versi 1.3.1
accesspressthemes ripple Versi 1.2.0
accesspressthemes scrollme Versi 2.1.0
accesspressthemes smart logo showcase lite Versi 1.1.7

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 93 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.