phpwarden
FeaturesComparePricingAdvisoriesBlogDocsChangelogLog in
Log inStart free

CVE-2021-24867: Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

critical Affects accessbuddy (WordPress plugin), accesspress-anonymous-post (WordPress plugin), accesspress-basic (WordPress plugin), accesspress-custom-css (WordPress plugin), accesspress-custom-post-type (WordPress plugin), accesspress-ifeeds (WordPress plugin) and 87 more. Feed 2026.10.29.3, updated 2026-10-29; published ; advisory modified .

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
accessbuddy (WordPress plugin) WordPress
Affected versions
=1.0.0
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
accesspress-anonymous-post (WordPress plugin) WordPress
Affected versions
=2.8.0
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
accesspress-basic (WordPress plugin) WordPress
Affected versions
=3.2.1
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
accesspress-custom-css (WordPress plugin) WordPress
Affected versions
=2.0.1
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
accesspress-custom-post-type (WordPress plugin) WordPress
Affected versions
=1.0.8
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
accesspress-ifeeds (WordPress plugin) WordPress
Affected versions
=4.0.3
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
accesspress-lite (WordPress plugin) WordPress
Affected versions
=2.92
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
accesspress-mag (WordPress plugin) WordPress
Affected versions
=2.6.5
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
accesspress-parallax (WordPress plugin) WordPress
Affected versions
=4.5
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
accesspress-ray (WordPress plugin) WordPress
Affected versions
=1.19.5
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
accesspress-root (WordPress plugin) WordPress
Affected versions
=2.5
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
accesspress-social-counter (WordPress plugin) WordPress
Affected versions
=1.9.1
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
accesspress-social-icons (WordPress plugin) WordPress
Affected versions
=1.8.2
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
accesspress-social-login-lite (WordPress plugin) WordPress
Affected versions
=3.4.7
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
accesspress-social-share (WordPress plugin) WordPress
Affected versions
=4.5.5
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
accesspress-staple (WordPress plugin) WordPress
Affected versions
=1.9.1
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
accesspress-store (WordPress plugin) WordPress
Affected versions
=2.4.9
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
agency-lite (WordPress plugin) WordPress
Affected versions
=1.1.6
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
ap-companion (WordPress plugin) WordPress
Affected versions
<1.0.7
Fixed in
1.0.7
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
ap-contact-form (WordPress plugin) WordPress
Affected versions
=1.0.6
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
ap-custom-testimonial (WordPress plugin) WordPress
Affected versions
=1.4.6
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
ap-mega-menu (WordPress plugin) WordPress
Affected versions
=3.0.5
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
ap-pricing-tables-lite (WordPress plugin) WordPress
Affected versions
=1.1.2
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
apex-notification-bar-lite (WordPress plugin) WordPress
Affected versions
=2.0.4
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
aplite (WordPress plugin) WordPress
Affected versions
=1.0.6
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
badge-designer-lite-for-woocommerce (WordPress plugin) WordPress
Affected versions
=1.1.0
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
bingle (WordPress plugin) WordPress
Affected versions
=1.0.4
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
bloger (WordPress plugin) WordPress
Affected versions
=1.2.6
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
comments-disable---accesspress (WordPress plugin) WordPress
Affected versions
=1.0.7
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
construction-lite (WordPress plugin) WordPress
Affected versions
=1.2.5
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
doko (WordPress plugin) WordPress
Affected versions
=1.0.27
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
easy-side-tab (WordPress plugin) WordPress
Affected versions
=1.0.7
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
enlighten (WordPress plugin) WordPress
Affected versions
=1.3.5
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
everest-admin-theme-lite (WordPress plugin) WordPress
Affected versions
=1.0.7
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
everest-coming-soon-lite (WordPress plugin) WordPress
Affected versions
=1.1.0
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
everest-comment-rating-lite (WordPress plugin) WordPress
Affected versions
=2.0.4
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
everest-counter-lite (WordPress plugin) WordPress
Affected versions
=2.0.7
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
everest-faq-manager-lite (WordPress plugin) WordPress
Affected versions
=1.0.8
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
everest-gallery-lite (WordPress plugin) WordPress
Affected versions
=1.0.8
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
everest-gplaces-business-reviews (WordPress plugin) WordPress
Affected versions
=1.0.9
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
everest-review-lite (WordPress plugin) WordPress
Affected versions
=1.0.7
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
everest-tab-lite (WordPress plugin) WordPress
Affected versions
=2.0.3
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
everest-timeline-lite (WordPress plugin) WordPress
Affected versions
=1.1.1
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
fashstore (WordPress plugin) WordPress
Affected versions
=1.2.1
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
form-store-to-db (WordPress plugin) WordPress
Affected versions
=1.0.9
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
fotography (WordPress plugin) WordPress
Affected versions
=2.4.0
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
gaga-corp (WordPress plugin) WordPress
Affected versions
=1.0.8
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
gaga-lite (WordPress plugin) WordPress
Affected versions
=1.4.2
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
inline-call-to-action-builder-lite (WordPress plugin) WordPress
Affected versions
=1.1.0
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
mcontact-button (WordPress plugin) WordPress
Affected versions
<2.0.7
Fixed in
2.0.7
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
one-paze (WordPress plugin) WordPress
Affected versions
=2.2.8
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
parallax-blog (WordPress plugin) WordPress
Affected versions
=3.1.1574941215
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
parallaxsome (WordPress plugin) WordPress
Affected versions
=1.3.6
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
pi-button (WordPress plugin) WordPress
Affected versions
=3.3.3
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
product-slider-for-woocommerce-lite (WordPress plugin) WordPress
Affected versions
=1.1.5
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
punte (WordPress plugin) WordPress
Affected versions
=1.1.2
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
revolve (WordPress plugin) WordPress
Affected versions
=1.3.1
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
ripple (WordPress plugin) WordPress
Affected versions
=1.2.0
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
scrollme (WordPress plugin) WordPress
Affected versions
=2.1.0
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
smart-logo-showcase-lite (WordPress plugin) WordPress
Affected versions
=1.1.7
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
smart-scroll-posts (WordPress plugin) WordPress
Affected versions
=2.0.8
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
smart-scroll-to-top-lite (WordPress plugin) WordPress
Affected versions
=1.0.3
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
social-auto-poster (WordPress plugin) WordPress
Affected versions
=2.1.3
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
social-review (WordPress plugin) WordPress
Affected versions
<1.0.9
Fixed in
1.0.9
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
sportsmag (WordPress plugin) WordPress
Affected versions
=1.2.1
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
storevilla (WordPress plugin) WordPress
Affected versions
=1.4.1
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
swing-lite (WordPress plugin) WordPress
Affected versions
=1.1.9
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
tauto-poster (WordPress plugin) WordPress
Affected versions
=1.4.5
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
the-launcher (WordPress plugin) WordPress
Affected versions
=1.3.2
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
the-monday (WordPress plugin) WordPress
Affected versions
=1.4.1
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
total-gdpr-compliance-lite (WordPress plugin) WordPress
Affected versions
=1.0.4
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
total-team-lite (WordPress plugin) WordPress
Affected versions
=1.1.1
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
ultimate-author-box-lite (WordPress plugin) WordPress
Affected versions
=1.1.2
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
ultimate-form-builder-lite (WordPress plugin) WordPress
Affected versions
=1.5.0
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
uncode-lite (WordPress plugin) WordPress
Affected versions
=1.3.1
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
unicon-lite (WordPress plugin) WordPress
Affected versions
=1.2.6
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
vmag (WordPress plugin) WordPress
Affected versions
=1.2.7
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
vmagazine-lite (WordPress plugin) WordPress
Affected versions
=1.3.5
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
vmagazine-news (WordPress plugin) WordPress
Affected versions
=1.0.5
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
wp-1-slider (WordPress plugin) WordPress
Affected versions
=1.2.9
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
wp-blog-manager-lite (WordPress plugin) WordPress
Affected versions
=1.1.0
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
wp-comment-designer-lite (WordPress plugin) WordPress
Affected versions
=2.0.3
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
wp-cookie-user-info (WordPress plugin) WordPress
Affected versions
=1.0.7
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
wp-floating-menu (WordPress plugin) WordPress
Affected versions
=1.4.4
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
wp-media-manager-lite (WordPress plugin) WordPress
Affected versions
=1.1.2
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
wp-menu-icons-lite (WordPress plugin) WordPress
Affected versions
<1.0.9
Fixed in
1.0.9
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
wp-popup-banners (WordPress plugin) WordPress
Affected versions
=1.2.3
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
wp-popup-lite (WordPress plugin) WordPress
Affected versions
=1.0.8
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
wp-product-gallery-lite (WordPress plugin) WordPress
Affected versions
=1.1.1
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
wp-tfeed (WordPress plugin) WordPress
Affected versions
=1.6.7
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
zigcy-baby (WordPress plugin) WordPress
Affected versions
=1.0.6
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
zigcy-cosmetics (WordPress plugin) WordPress
Affected versions
=1.0.5
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are af

Package
zigcy-lite (WordPress plugin) WordPress
Affected versions
=2.0.9
Fixed in
no fix recorded
Severity
critical  CVSS 9.8
Exploitation
not on CISA KEV · EPSS 18% (97.2th percentile)
Published
2022-02-21
Source
nvd

References

CWE-912
NVD recordaccessbuddy (WordPress plugin) advisoriesaccesspress-anonymous-post (WordPress plugin) advisoriesaccesspress-basic (WordPress plugin) advisoriesaccesspress-custom-css (WordPress plugin) advisoriesaccesspress-custom-post-type (WordPress plugin) advisoriesaccesspress-ifeeds (WordPress plugin) advisories

Am I affected?

Find out in one command. phpwarden checks your WordPress install against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.

# PHP projects (recommended)
composer require --dev phpwarden/phpwarden
# then
vendor/bin/phpwarden wordpress /var/www/html

# or, without Composer
pipx install phpwarden   &&   phpwarden wordpress /var/www/html

Or keep it checked automatically with the GitHub Action or a nightly cron; see WordPress docs.

Install docs   How findings are ranked

Related advisories