Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2021-39317

🗓️ 11 Oct 2021 15:48:57Reported by WordfenceType 
cve
 cve🔗 web.nvd.nist.gov👁 84 Views🌐 WEB

WordPress plugin and themes by AccessPress Themes vulnerable to file upload via plugin_offline_installer AJAX action

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
Circl		CVE-2021-39317
11 Oct 202120:24
–circl
CNNVD		WordPress 代码问题漏洞
11 Oct 202100:00
–cnnvd
Cvelist		CVE-2021-39317 AccessPress Themes - Authenticated Malicious File Upload
11 Oct 202115:48
–cvelist
EUVD		EUVD-2021-25678
7 Oct 202500:30
–euvd
NVD		CVE-2021-39317
11 Oct 202116:15
–nvd
Patchstack		WordPress ScrollMe theme <= 2.1.0 - Arbitrary File Upload vulnerability
28 Nov 202100:00
–patchstack
Patchstack		WordPress AccessPress Root theme <= 2.5 - Arbitrary File Upload vulnerability
28 Nov 202100:00
–patchstack
Patchstack		WordPress Edict Lite theme <= 1.1.4 - Arbitrary File Upload vulnerability
24 Dec 202100:00
–patchstack
Patchstack		WordPress Opstore theme <= 1.4.3 - Arbitrary File Upload vulnerability
24 Dec 202100:00
–patchstack
Patchstack		WordPress Eight Sec theme <= 1.1.4 - Arbitrary File Upload vulnerability
24 Dec 202100:00
–patchstack
Rows per page
NVD
Vulners
Node
accesspressthemesaccess_demo_importerRange<1.0.7wordpress
OR
accesspressthemesaccesspress-liteRange≤2.92wordpress
OR
accesspressthemesaccesspress-magRange≤2.6.5wordpress
OR
accesspressthemesaccesspress-parallaxRange≤4.5wordpress
OR
accesspressthemesaccesspress-rootRange≤2.5wordpress
OR
accesspressthemesaccesspress-storeRange≤2.4.9wordpress
OR
accesspressthemesaccesspress_basicRange≤3.2.1wordpress
OR
accesspressthemesagency-liteRange≤1.1.6wordpress
OR
accesspressthemesarrivalRange≤1.4.2wordpress
OR
accesspressthemesbingleRange≤1.0.4wordpress
OR
accesspressthemesblogerRange≤1.2.6wordpress
OR
accesspressthemesbrovyRange≤1.3wordpress
OR
accesspressthemesconstruction-liteRange≤1.2.5wordpress
OR
accesspressthemesdokoRange≤1.0.27wordpress
OR
accesspressthemesedict-liteRange≤1.1.4wordpress
OR
accesspressthemeseight-secRange≤1.1.4wordpress
OR
accesspressthemeseightlaw-liteRange≤2.1.5wordpress
OR
accesspressthemeseightmedi-liteRange≤2.1.8wordpress
OR
accesspressthemeseightstore-liteRange≤1.2.5wordpress
OR
accesspressthemesenlightenRange≤1.3.5wordpress
OR
accesspressthemesfotographyRange≤2.4.0wordpress
OR
accesspressthemesopstoreRange≤1.4.3wordpress
OR
accesspressthemesparallaxsomeRange≤1.3.6wordpress
OR
accesspressthemespunteRange≤1.1.2wordpress
OR
accesspressthemesrevolveRange≤1.3.1wordpress
OR
accesspressthemesrippleRange≤1.2.0wordpress
OR
accesspressthemessakalaRange≤1.0.4wordpress
OR
accesspressthemesscrollmeRange≤2.1.0wordpress
OR
accesspressthemesstorevillaRange≤1.4.1wordpress
OR
accesspressthemesswing-liteRange≤1.1.9wordpress
OR
accesspressthemesthe-launcherRange≤1.3.2wordpress
OR
accesspressthemesthe-mondayRange≤1.4.1wordpress
OR
accesspressthemesthe100Range≤1.1.2wordpress
OR
accesspressthemesultra-sevenRange≤1.2.8wordpress
OR
accesspressthemesuncode-liteRange≤1.3.3wordpress
OR
accesspressthemesvmagRange≤1.2.7wordpress
OR
accesspressthemesvmagazine-liteRange≤1.3.5wordpress
OR
accesspressthemesvmagazine-newsRange≤1.0.5wordpress
OR
accesspressthemeswp-storeRange≤1.1.9wordpress
OR
accesspressthemeswpparallaxRange≤2.0.6wordpress
OR
accesspressthemeszigcy-babyRange≤1.0.6wordpress
OR
accesspressthemeszigcy-cosmeticsRange≤1.0.5wordpress
OR
accesspressthemeszigcy-liteRange≤2.0.9wordpress
[
  {
    "product": "Access Demo Importer",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "1.0.6",
        "status": "affected",
        "version": "1.0.6",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "accesspress-basic",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "3.2.1",
        "status": "affected",
        "version": "3.2.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "accesspress-lite",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "2.9.2",
        "status": "affected",
        "version": "2.9.2",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "accesspress-mag",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "2.6.5",
        "status": "affected",
        "version": "2.6.5",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "accesspress-parallax",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "4.5",
        "status": "affected",
        "version": "4.5",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "accesspress-root",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "2.5",
        "status": "affected",
        "version": "2.5",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "accesspress-store",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "2.4.9",
        "status": "affected",
        "version": "2.4.9",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "agency-lite",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "1.1.6",
        "status": "affected",
        "version": "1.1.6",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "arrival",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "1.4.2",
        "status": "affected",
        "version": "1.4.2",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "bingle",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "1.0.4",
        "status": "affected",
        "version": "1.0.4",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "bloger",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "1.2.6",
        "status": "affected",
        "version": "1.2.6",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "brovy",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "1.3",
        "status": "affected",
        "version": "1.3",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "construction-lite",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "1.2.5",
        "status": "affected",
        "version": "1.2.5",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "doko",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "1.0.27",
        "status": "affected",
        "version": "1.0.27",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "edict-lite",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "1.1.4",
        "status": "affected",
        "version": "1.1.4",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "enlighten",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "1.3.5",
        "status": "affected",
        "version": "1.3.5",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "fotography",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "2.4.0",
        "status": "affected",
        "version": "2.4.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "opstore",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "1.4.3",
        "status": "affected",
        "version": "1.4.3",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "parallaxsome",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "1.3.6",
        "status": "affected",
        "version": "1.3.6",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "punte",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "1.1.2",
        "status": "affected",
        "version": "1.1.2",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "revolve",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "1.3.1",
        "status": "affected",
        "version": "1.3.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "ripple",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "1.2.0",
        "status": "affected",
        "version": "1.2.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "sakala",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "1.0.4",
        "status": "affected",
        "version": "1.0.4",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "scrollme",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "2.1.0",
        "status": "affected",
        "version": "2.1.0",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "storevilla",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "1.4.1",
        "status": "affected",
        "version": "1.4.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "swing-lite",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "1.1.9",
        "status": "affected",
        "version": "1.1.9",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "swing-lite",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "1.1.9",
        "status": "affected",
        "version": "1.1.9",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "the100",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "1.1.2",
        "status": "affected",
        "version": "1.1.2",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "the-launcher",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "1.3.2",
        "status": "affected",
        "version": "1.3.2",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "the-monday",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "1.4.1",
        "status": "affected",
        "version": "1.4.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "ultra-seven",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "1.2.8",
        "status": "affected",
        "version": "1.2.8",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "uncode-lite",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "1.3.3",
        "status": "affected",
        "version": "1.3.3",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "vmag",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "1.2.7",
        "status": "affected",
        "version": "1.2.7",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "vmagazine-lite",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "1.3.5",
        "status": "affected",
        "version": "1.3.5",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "vmagazine-news",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "1.0.5",
        "status": "affected",
        "version": "1.0.5",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "wpparallax",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "2.0.6",
        "status": "affected",
        "version": "2.0.6",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "wp-store",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "1.1.9",
        "status": "affected",
        "version": "1.1.9",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "zigcy-baby",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "1.0.6",
        "status": "affected",
        "version": "1.0.6",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "zigcy-cosmetics",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "1.0.5",
        "status": "affected",
        "version": "1.0.5",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "zigcy-lite",
    "vendor": "AccessPress Themes",
    "versions": [
      {
        "lessThanOrEqual": "2.0.9",
        "status": "affected",
        "version": "2.0.9",
        "versionType": "custom"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
actionrequest bodywp-admin/admin-ajax.phpArbitrary file upload via plugin_offline_installer AJAX action without proper capability/file validation.CWE-434, CWE-285
file_locationrequest bodywp-admin/admin-ajax.phpArbitrary file upload via plugin_offline_installer AJAX action without proper capability/file validation.CWE-434, CWE-285
filerequest bodywp-admin/admin-ajax.phpArbitrary file upload via plugin_offline_installer AJAX action without proper capability/file validation.CWE-434, CWE-285
host_typerequest bodywp-admin/admin-ajax.phpArbitrary file upload via plugin_offline_installer AJAX action without proper capability/file validation.CWE-434, CWE-285
class_namerequest bodywp-admin/admin-ajax.phpArbitrary file upload via plugin_offline_installer AJAX action without proper capability/file validation.CWE-434, CWE-285
slugrequest bodywp-admin/admin-ajax.phpArbitrary file upload via plugin_offline_installer AJAX action without proper capability/file validation.CWE-434, CWE-285

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
21 Nov 2024 06:19Current
8.5High risk
Vulners AI Score8.5
CVSS 26.5
CVSS 3.18.8
EPSS0.01406
SSVC
CWE-434CWE-285
accesspress themeswordpress pluginwordpress themesfile upload vulnerabilitycve-2021-39317nvdsecurity alert
84