Backdoored Plugins & Themes from AccessPress Themes

2021-10-1300:00:00

wpscan.com

0.004 Low

EPSS

Percentile

72.3%

JSON

Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusion

CPENameOperatorVersion
accesspress-anonymous-postlt2.8.1
accesspress-custom-csslt2.0.2
accesspress-custom-post-typelt1.0.9
accesspress-facebook-auto-postlt2.1.4
accesspress-instagram-feedlt4.0.4
accesspress-pinterestlt3.3.4
accesspress-social-counterlt1.9.2
accesspress-social-iconslt1.8.3
accesspress-social-login-litelt3.4.8
accesspress-social-sharelt4.5.6

Name	Operator	Version
accesspress-anonymous-post	lt	2.8.1
accesspress-custom-css	lt	2.0.2
accesspress-custom-post-type	lt	1.0.9
accesspress-facebook-auto-post	lt	2.1.4
accesspress-instagram-feed	lt	4.0.4
accesspress-pinterest	lt	3.3.4
accesspress-social-counter	lt	1.9.2
accesspress-social-icons	lt	1.8.3
accesspress-social-login-lite	lt	3.4.8
accesspress-social-share	lt	4.5.6