CVE-2021-24867

CVE-2021-24867 relates to backdoored AccessPress Themes plugins/themes distributed via the vendor site (not from wordpress.org). The vulnerability was exploited in the wild to deploy web shells and site defacements, observed by Talos IR as part of initial access through exploitation of a WordPres...

CVE-2021-39317

CVE-2021-39317 affects AccessPress products: WordPress Plugin AccessPress Demo Importer (<=1.0.6) and multiple AccessPress themes (e.g., accesspress-basic <=3.2.1, accesspress-lite <=2.92, accesspress-mag