- Record status
- Published
- Identifier year (not publication year)
- 2021
- Source publication
- Source updated
- Imported by cveboard
CNA source text (English)
AccessPress Themes - Authenticated Malicious File Upload
A WordPress plugin and several WordPress themes developed by AccessPress Themes are vulnerable to malicious file uploads via the plugin_offline_installer AJAX action due to a missing capability check in the plugin_offline_installer_callback function found in the /demo-functions.php file or /welcome.php file of the affected products. The complete list of affected products and their versions are below: WordPress Plugin: AccessPress Demo Importer <=1.0.6 WordPress Themes: accesspress-basic <= 3.2.1 accesspress-lite <= 2.92 accesspress-mag <= 2.6.5 accesspress-parallax <= 4.5 accesspress-root <= 2.5 accesspress-store <= 2.4.9 agency-lite <= 1.1.6 arrival <= 1.4.2 bingle <= 1.0.4 bloger <= 1.2.6 brovy <= 1.3 construction-lite <= 1.2.5 doko <= 1.0.27 edict-lite <= 1.1.4 eightlaw-lite <= 2.1.5 eightmedi-lite <= 2.1.8 eight-sec <= 1.1.4 eightstore-lite <= 1.2.5 enlighten <= 1.3.5 fotography <= 2.4.0 opstore <= 1.4.3 parallaxsome <= 1.3.6 punte <= 1.1.2 revolve <= 1.3.1 ripple <= 1.2.0 sakala <= 1.0.4 scrollme <= 2.1.0 storevilla <= 1.4.1 swing-lite <= 1.1.9 the100 <= 1.1.2 the-launcher <= 1.3.2 the-monday <= 1.4.1 ultra-seven <= 1.2.8 uncode-lite <= 1.3.3 vmag <= 1.2.7 vmagazine-lite <= 1.3.5 vmagazine-news <= 1.0.5 wpparallax <= 2.0.6 wp-store <= 1.1.9 zigcy-baby <= 1.0.6 zigcy-cosmetics <= 1.0.5 zigcy-lite <= 2.0.9
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Access Demo Importer
- Vendor
- AccessPress Themes
- Product
- Access Demo Importer
- Platforms
- Unknown
- Default status
Unknown
Access Demo Importer · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 1.0.6 | affected | custom | Unavailable | 1.0.6 | None listed |
|---|
accesspress-basic
- Vendor
- AccessPress Themes
- Product
- accesspress-basic
- Platforms
- Unknown
- Default status
Unknown
accesspress-basic · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 3.2.1 | affected | custom | Unavailable | 3.2.1 | None listed |
|---|
accesspress-lite
- Vendor
- AccessPress Themes
- Product
- accesspress-lite
- Platforms
- Unknown
- Default status
Unknown
accesspress-lite · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 2.9.2 | affected | custom | Unavailable | 2.9.2 | None listed |
|---|
accesspress-mag
- Vendor
- AccessPress Themes
- Product
- accesspress-mag
- Platforms
- Unknown
- Default status
Unknown
accesspress-mag · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 2.6.5 | affected | custom | Unavailable | 2.6.5 | None listed |
|---|
accesspress-parallax
- Vendor
- AccessPress Themes
- Product
- accesspress-parallax
- Platforms
- Unknown
- Default status
Unknown
accesspress-parallax · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 4.5 | affected | custom | Unavailable | 4.5 | None listed |
|---|
accesspress-root
- Vendor
- AccessPress Themes
- Product
- accesspress-root
- Platforms
- Unknown
- Default status
Unknown
accesspress-root · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 2.5 | affected | custom | Unavailable | 2.5 | None listed |
|---|
accesspress-store
- Vendor
- AccessPress Themes
- Product
- accesspress-store
- Platforms
- Unknown
- Default status
Unknown
accesspress-store · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 2.4.9 | affected | custom | Unavailable | 2.4.9 | None listed |
|---|
agency-lite
- Vendor
- AccessPress Themes
- Product
- agency-lite
- Platforms
- Unknown
- Default status
Unknown
agency-lite · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 1.1.6 | affected | custom | Unavailable | 1.1.6 | None listed |
|---|
arrival
- Vendor
- AccessPress Themes
- Product
- arrival
- Platforms
- Unknown
- Default status
Unknown
arrival · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 1.4.2 | affected | custom | Unavailable | 1.4.2 | None listed |
|---|
bingle
- Vendor
- AccessPress Themes
- Product
- bingle
- Platforms
- Unknown
- Default status
Unknown
bingle · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 1.0.4 | affected | custom | Unavailable | 1.0.4 | None listed |
|---|
bloger
- Vendor
- AccessPress Themes
- Product
- bloger
- Platforms
- Unknown
- Default status
Unknown
bloger · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 1.2.6 | affected | custom | Unavailable | 1.2.6 | None listed |
|---|
brovy
- Vendor
- AccessPress Themes
- Product
- brovy
- Platforms
- Unknown
- Default status
Unknown
brovy · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 1.3 | affected | custom | Unavailable | 1.3 | None listed |
|---|
construction-lite
- Vendor
- AccessPress Themes
- Product
- construction-lite
- Platforms
- Unknown
- Default status
Unknown
construction-lite · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 1.2.5 | affected | custom | Unavailable | 1.2.5 | None listed |
|---|
doko
- Vendor
- AccessPress Themes
- Product
- doko
- Platforms
- Unknown
- Default status
Unknown
doko · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 1.0.27 | affected | custom | Unavailable | 1.0.27 | None listed |
|---|
edict-lite
- Vendor
- AccessPress Themes
- Product
- edict-lite
- Platforms
- Unknown
- Default status
Unknown
edict-lite · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 1.1.4 | affected | custom | Unavailable | 1.1.4 | None listed |
|---|
enlighten
- Vendor
- AccessPress Themes
- Product
- enlighten
- Platforms
- Unknown
- Default status
Unknown
enlighten · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 1.3.5 | affected | custom | Unavailable | 1.3.5 | None listed |
|---|
fotography
- Vendor
- AccessPress Themes
- Product
- fotography
- Platforms
- Unknown
- Default status
Unknown
fotography · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 2.4.0 | affected | custom | Unavailable | 2.4.0 | None listed |
|---|
opstore
- Vendor
- AccessPress Themes
- Product
- opstore
- Platforms
- Unknown
- Default status
Unknown
opstore · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 1.4.3 | affected | custom | Unavailable | 1.4.3 | None listed |
|---|
parallaxsome
- Vendor
- AccessPress Themes
- Product
- parallaxsome
- Platforms
- Unknown
- Default status
Unknown
parallaxsome · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 1.3.6 | affected | custom | Unavailable | 1.3.6 | None listed |
|---|
punte
- Vendor
- AccessPress Themes
- Product
- punte
- Platforms
- Unknown
- Default status
Unknown
punte · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 1.1.2 | affected | custom | Unavailable | 1.1.2 | None listed |
|---|
revolve
- Vendor
- AccessPress Themes
- Product
- revolve
- Platforms
- Unknown
- Default status
Unknown
revolve · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 1.3.1 | affected | custom | Unavailable | 1.3.1 | None listed |
|---|
ripple
- Vendor
- AccessPress Themes
- Product
- ripple
- Platforms
- Unknown
- Default status
Unknown
ripple · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 1.2.0 | affected | custom | Unavailable | 1.2.0 | None listed |
|---|
sakala
- Vendor
- AccessPress Themes
- Product
- sakala
- Platforms
- Unknown
- Default status
Unknown
sakala · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 1.0.4 | affected | custom | Unavailable | 1.0.4 | None listed |
|---|
scrollme
- Vendor
- AccessPress Themes
- Product
- scrollme
- Platforms
- Unknown
- Default status
Unknown
scrollme · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 2.1.0 | affected | custom | Unavailable | 2.1.0 | None listed |
|---|
storevilla
- Vendor
- AccessPress Themes
- Product
- storevilla
- Platforms
- Unknown
- Default status
Unknown
storevilla · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 1.4.1 | affected | custom | Unavailable | 1.4.1 | None listed |
|---|
swing-lite
- Vendor
- AccessPress Themes
- Product
- swing-lite
- Platforms
- Unknown
- Default status
Unknown
swing-lite · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 1.1.9 | affected | custom | Unavailable | 1.1.9 | None listed |
|---|
swing-lite
- Vendor
- AccessPress Themes
- Product
- swing-lite
- Platforms
- Unknown
- Default status
Unknown
swing-lite · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 1.1.9 | affected | custom | Unavailable | 1.1.9 | None listed |
|---|
the100
- Vendor
- AccessPress Themes
- Product
- the100
- Platforms
- Unknown
- Default status
Unknown
the100 · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 1.1.2 | affected | custom | Unavailable | 1.1.2 | None listed |
|---|
the-launcher
- Vendor
- AccessPress Themes
- Product
- the-launcher
- Platforms
- Unknown
- Default status
Unknown
the-launcher · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 1.3.2 | affected | custom | Unavailable | 1.3.2 | None listed |
|---|
the-monday
- Vendor
- AccessPress Themes
- Product
- the-monday
- Platforms
- Unknown
- Default status
Unknown
the-monday · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 1.4.1 | affected | custom | Unavailable | 1.4.1 | None listed |
|---|
ultra-seven
- Vendor
- AccessPress Themes
- Product
- ultra-seven
- Platforms
- Unknown
- Default status
Unknown
ultra-seven · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 1.2.8 | affected | custom | Unavailable | 1.2.8 | None listed |
|---|
uncode-lite
- Vendor
- AccessPress Themes
- Product
- uncode-lite
- Platforms
- Unknown
- Default status
Unknown
uncode-lite · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 1.3.3 | affected | custom | Unavailable | 1.3.3 | None listed |
|---|
vmag
- Vendor
- AccessPress Themes
- Product
- vmag
- Platforms
- Unknown
- Default status
Unknown
vmag · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 1.2.7 | affected | custom | Unavailable | 1.2.7 | None listed |
|---|
vmagazine-lite
- Vendor
- AccessPress Themes
- Product
- vmagazine-lite
- Platforms
- Unknown
- Default status
Unknown
vmagazine-lite · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 1.3.5 | affected | custom | Unavailable | 1.3.5 | None listed |
|---|
vmagazine-news
- Vendor
- AccessPress Themes
- Product
- vmagazine-news
- Platforms
- Unknown
- Default status
Unknown
vmagazine-news · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 1.0.5 | affected | custom | Unavailable | 1.0.5 | None listed |
|---|
wpparallax
- Vendor
- AccessPress Themes
- Product
- wpparallax
- Platforms
- Unknown
- Default status
Unknown
wpparallax · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 2.0.6 | affected | custom | Unavailable | 2.0.6 | None listed |
|---|
wp-store
- Vendor
- AccessPress Themes
- Product
- wp-store
- Platforms
- Unknown
- Default status
Unknown
wp-store · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 1.1.9 | affected | custom | Unavailable | 1.1.9 | None listed |
|---|
zigcy-baby
- Vendor
- AccessPress Themes
- Product
- zigcy-baby
- Platforms
- Unknown
- Default status
Unknown
zigcy-baby · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 1.0.6 | affected | custom | Unavailable | 1.0.6 | None listed |
|---|
zigcy-cosmetics
- Vendor
- AccessPress Themes
- Product
- zigcy-cosmetics
- Platforms
- Unknown
- Default status
Unknown
zigcy-cosmetics · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 1.0.5 | affected | custom | Unavailable | 1.0.5 | None listed |
|---|
zigcy-lite
- Vendor
- AccessPress Themes
- Product
- zigcy-lite
- Platforms
- Unknown
- Default status
Unknown
zigcy-lite · Scoped product and version facts| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|
| 2.0.9 | affected | custom | Unavailable | 2.0.9 | None listed |
|---|