CVE-2021-24867CWE-912

Backdoored Plugins & Themes from AccessPress Themes

published February 21, 2022

CVSS
—
EPSS
18%
Percentile
97.2
In the wild
Unconfirmed
What it is

🚨 AccessPress Themes has a backdoor situation! If you've downloaded their plugins or themes from their website, you might have unknowingly opened the door for trouble. ⚠️ Think of it like a restaurant that has a secret door in the kitchen only some staff know about. If malicious actors gain access, they can sneak in and tamper with orders when no one’s watching! An attacker could potentially manipulate your themes and plugins, leading to compromised websites. This could mean unauthorized changes, data theft, or even site takeovers — a digital nightmare for every site owner!

Put simply

Think of it like a restaurant that has a secret door in the kitchen only some staff know about. If malicious actors gain access, they can sneak in and tamper with orders when no one’s watching! The vulnerability arises from the AccessPress Themes vendor being compromised, allowing attackers to insert backdoors into various plugins and themes downloaded directly from their website, while versions from wordpress.org remain unaffected.

What to do

An attacker could potentially manipulate your themes and plugins, leading to compromised websites. This could mean unauthorized changes, data theft, or even site takeovers — a digital nightmare for every site owner! Immediately check your site for AccessPress Themes plugins or themes downloaded from their website. If found, remove them and replace them with safe versions from wordpress.org. Regularly audit your site to ensure all components are secure and up to date. You've got this! Secure your site and keep it safe from backdoors — your security hero status is officially activated! 🦸‍♂️🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.18044 · 97.2th percentile
Weakness
CWE-912 · Hidden Functionality
Published
2022-02-21T10:45Z
EPSS history
Timeline
  • 21 FEB 10:45Z
    Backdoored Plugins & Themes from AccessPress Themes
    cvelistv5