CVE-2021-24867
Backdoored Plugins & Themes from AccessPress Themes
Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusion
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusion
- Record
CVE-2021-24867- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-912
- Updated
- 2026-11-02
CVE List No score
Backdoored Plugins & Themes from AccessPress Themes
Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusion
- Record
CVE-2021-24867- Weakness
- CWE-912
- Updated
- 2026-11-02
EUVDEUVD-2021-11779 No score
Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusion
- Record
EUVD-2021-11779- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8cff-vwcw-f7mc No score
Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored...
Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusion
- Record
GHSA-8cff-vwcw-f7mc- Weakness
- CWE-912
- Updated
- 2026-11-02
OSV
Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusion
- Record
CVE-2021-24867- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
- access-keys wp popup banners
- accesspress themes accessbuddy
- accesspress themes basic
- accesspress themes custom css
- accesspress themes custom post type
- accesspress themes ifeeds
- accesspress themes lite
- accesspress themes mag
- accesspress themes parallax
- accesspress themes root
- accesspress themes social counter
- accesspress themes social icons
Show 181 moreShow less
- accesspress themes social login lite – social login wordpress plugin
- accesspress themes social share
- accesspress themes staple
- accesspress themes store
- accesspress themes accesspress-ray
- accesspress themes agency lite
- accesspress themes ap companion
- accesspress themes aplite
- accesspress themes badge designer lite for woocommerce
- accesspress themes beautiful faq plugin for wordpress – everest faq manager lite
- accesspress themes beautiful stat counter plugin for wordpress – everest counter lite
- accesspress themes bingle
- accesspress themes bloger
- accesspress themes comments disable – accesspress
- accesspress themes construction lite
- accesspress themes contact form for wordpress – ultimate form builder lite
- accesspress themes cookie notification plugin for wordpress – wp cookie user info
- accesspress themes cta plugin for wordpress – easy side tab
- accesspress themes doko
- accesspress themes easiest contact form for wordpress – ap contact form
- accesspress themes effectively add & customize free icons for wordpress menus – wp menu icons lite
- accesspress themes enlighten
- accesspress themes everest gplaces business reviews
- accesspress themes everest review lite – user/admin review plugin for wordpress
- accesspress themes fashstore
- accesspress themes faster and easier scroll to top plugin for wordpress – smart scroll to top lite
- accesspress themes form store to db
- accesspress themes fotography
- accesspress themes free responsive post/article author section plugin for wordpress – ultimate author box lite
- accesspress themes free responsive tab plugin for wordpress – everest tab lite
- accesspress themes free wordpress plugin to display like/dislike comment rating – everest comment rating lite
- accesspress themes frontend post wordpress plugin – accesspress anonymous post
- accesspress themes gaga corp
- accesspress themes gaga lite
- accesspress themes inline call to action builder lite – free call to action layer plugin for wordpress
- accesspress themes mcontact button
- accesspress themes mega menu plugin for wordpress – ap mega menu
- accesspress themes one paze
- accesspress themes parallax-blog
- accesspress themes parallaxsome
- accesspress themes pi button
- accesspress themes plugin to manage / design wordpress blog – wp blog manager lite
- accesspress themes pricing table builder – ap pricing tables lite
- accesspress themes product slider for woocommerce lite
- accesspress themes punte
- accesspress themes responsive clients logo gallery plugin for wordpress – smart logo showcase lite
- accesspress themes responsive media gallery plugin for wordpress – everest gallery lite
- accesspress themes responsive notification bar plugin for wordpress – apex notification bar lite
- accesspress themes responsive products showcase listing for wordpress – wp product gallery lite
- accesspress themes responsive wordpress timeline plugin – everest timeline lite
- accesspress themes revolve
- accesspress themes ripple
- accesspress themes scrollme
- accesspress themes smart scroll posts for wordpress
- accesspress themes smartest way to design & customize wordpress comments & comment form – wp comment designer lite
- accesspress themes social auto poster
- accesspress themes social review
- accesspress themes sportsmag
- accesspress themes storevilla
- accesspress themes swing lite
- accesspress themes tauto poster
- accesspress themes testimonial wordpress plugin – ap custom testimonial
- accesspress themes the easiest wordpress media manager plugin – wp media manager lite
- accesspress themes the launcher
- accesspress themes the monday
- accesspress themes total gdpr compliance lite – wordpress plugin for gdpr compatibility
- accesspress themes total team lite – responsive team manager / showcase plugin for wordpress
- accesspress themes ultimate coming soon, maintenance mode plugin for wordpress – everest coming soon lite
- accesspress themes uncode lite
- accesspress themes unicon lite
- accesspress themes vmag
- accesspress themes vmagazine lite
- accesspress themes vmagazine news
- accesspress themes wordpress backend customizer – everest admin theme lite
- accesspress themes wordpress slider plugin – wp 1 slider
- accesspress themes wp floating menu – one page navigator, sticky menu for wordpress
- accesspress themes wp popup banners
- accesspress themes wp popup lite – responsive popup plugin for wordpress
- accesspress themes wp tfeed
- accesspress themes zigcy baby
- accesspress themes zigcy cosmetics
- accesspress themes zigcy lite
- accesspressthemes accessbuddy
- accesspressthemes accesspress social icons
- accesspressthemes accesspress anonymous post
- accesspressthemes accesspress basic
- accesspressthemes accesspress custom css
- accesspressthemes accesspress custom post type
- accesspressthemes accesspress ifeeds
- accesspressthemes accesspress lite
- accesspressthemes accesspress mag
- accesspressthemes accesspress parallax
- accesspressthemes accesspress ray
- accesspressthemes accesspress root
- accesspressthemes accesspress social counter
- accesspressthemes accesspress social login lite
- accesspressthemes accesspress social share
- accesspressthemes accesspress staple
- accesspressthemes accesspress store
- accesspressthemes agency lite
- accesspressthemes ap companion
- accesspressthemes ap contact form
- accesspressthemes ap custom testimonial
- accesspressthemes ap mega menu
- accesspressthemes ap pricing tables lite
- accesspressthemes apex notification bar lite
- accesspressthemes aplite
- accesspressthemes badge designer lite for woocommerce
- accesspressthemes bingle
- accesspressthemes bloger
- accesspressthemes comments disable - accesspress
- accesspressthemes construction lite
- accesspressthemes doko
- accesspressthemes easy side tab
- accesspressthemes enlighten
- accesspressthemes everest admin theme lite
- accesspressthemes everest coming soon lite
- accesspressthemes everest comment rating lite
- accesspressthemes everest counter lite
- accesspressthemes everest faq manager lite
- accesspressthemes everest gallery lite
- accesspressthemes everest gplaces business reviews
- accesspressthemes everest review lite
- accesspressthemes everest tab lite
- accesspressthemes everest timeline lite
- accesspressthemes fashstore
- accesspressthemes form store to db
- accesspressthemes fotography
- accesspressthemes gaga corp
- accesspressthemes gaga lite
- accesspressthemes inline call to action builder lite
- accesspressthemes mcontact button
- accesspressthemes one-paze
- accesspressthemes parallax blog
- accesspressthemes parallaxsome
- accesspressthemes pi button
- accesspressthemes product slider for woocommerce lite
- accesspressthemes punte
- accesspressthemes revolve
- accesspressthemes ripple
- accesspressthemes scrollme
- accesspressthemes smart logo showcase lite
- accesspressthemes smart scroll posts
- accesspressthemes smart scroll to top lite
- accesspressthemes social auto poster
- accesspressthemes social review
- accesspressthemes sportsmag
- accesspressthemes storevilla
- accesspressthemes swing lite
- accesspressthemes tauto poster
- accesspressthemes the launcher
- accesspressthemes the monday
- accesspressthemes total gdpr compliance lite
- accesspressthemes total team lite
- accesspressthemes ultimate-form-builder-lite
- accesspressthemes ultimate author box lite
- accesspressthemes uncode lite
- accesspressthemes unicon lite
- accesspressthemes vmag
- accesspressthemes vmagazine lite
- accesspressthemes vmagazine news
- accesspressthemes wp 1 slider
- accesspressthemes wp blog manager lite
- accesspressthemes wp comment designer lite
- accesspressthemes wp cookie user info
- accesspressthemes wp floating menu
- accesspressthemes wp media manager lite
- accesspressthemes wp menu icons lite
- accesspressthemes wp popup banners
- accesspressthemes wp popup lite
- accesspressthemes wp product gallery lite
- accesspressthemes wp tfeed
- accesspressthemes zigcy baby
- accesspressthemes zigcy cosmetics
- accesspressthemes zigcy lite
- unknown form store to db
- unknown mega menu plugin for wordpress – ap mega menu
- unknown pricing table builder – ap pricing tables lite
- unknown product slider for woocommerce lite
- unknown testimonial wordpress plugin – ap custom testimonial
- wpweb social auto poster
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, products | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-24867 is a critical vulnerability (CVSS 9.8) in Access-keys Wp Popup Banners, published February 21, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 18.0%, the 97th percentile. No source names a fixed version.