Read the docs
TI-2021-16689 Aliases CVE-2021-39317GHSA-737m-cr75-9hw3

AccessPress Themes - Authenticated Malicious File Upload

Priority MEDIUM 43CWE-285Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Security bypass, Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-285 and CWE-434.

Summary

A WordPress plugin and several WordPress themes developed by AccessPress Themes are vulnerable to malicious file uploads via the plugin_offline_installer AJAX action due to a missing capability check in the plugin_offline_installer_callback function found in the /demo-functions.php file or /welcome.php file of the affected products. The complete list of affected products and their versions are below: WordPress Plugin: AccessPress Demo Importer <=1.0.6 WordPress Themes: accesspress-basic <= 3.2.1 accesspress-lite <= 2.92 accesspress-mag <= 2.6.5 accesspress-parallax <= 4.5 accesspress-root <= 2.5 accesspress-store <= 2.4.9 agency-lite <= 1.1.6 arrival <= 1.4.2 bingle <= 1.0.4 bloger <= 1.2.6 brovy <= 1.3 construction-lite <= 1.2.5 doko <= 1.0.27 edict-lite <= 1.1.4 eightlaw-lite <= 2.1.5 eightmedi-lite <= 2.1.8 eight-sec <= 1.1.4 eightstore-lite <= 1.2.5 enlighten <= 1.3.5 fotography <= 2.4.0 opstore <= 1.4.3 parallaxsome <= 1.3.6 punte <= 1.1.2 revolve <= 1.3.1 ripple <= 1.2.0 sakala <= 1.0.4 scrollme <= 2.1.0 storevilla <= 1.4.1 swing-lite <= 1.1.9 the100 <= 1.1.2 the-launcher <= 1.3.2 the-monday <= 1.4.1 ultra-seven <= 1.2.8 uncode-lite <= 1.3.3 vmag <= 1.2.7 vmagazine-lite <= 1.3.5 vmagazine-news <= 1.0.5 wpparallax <= 2.0.6 wp-store <= 1.1.9 zigcy-baby <= 1.0.6 zigcy-cosmetics <= 1.0.5 zigcy-lite <= 2.0.9

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01706 77th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
AccessPress ThemesAccess Demo Importer1.0.6 – 1.0.6—No fix listedCNA
AccessPress Themesaccesspress-basic3.2.1 – 3.2.1—No fix listedCNA
AccessPress Themesaccesspress-lite2.9.2 – 2.9.2—No fix listedCNA
AccessPress Themesaccesspress-mag2.6.5 – 2.6.5—No fix listedCNA
AccessPress Themesaccesspress-parallax4.5 – 4.5—No fix listedCNA
AccessPress Themesaccesspress-root2.5 – 2.5—No fix listedCNA
AccessPress Themesaccesspress-store2.4.9 – 2.4.9—No fix listedCNA
AccessPress Themesagency-lite1.1.6 – 1.1.6—No fix listedCNA
AccessPress Themesarrival1.4.2 – 1.4.2—No fix listedCNA
AccessPress Themesbingle1.0.4 – 1.0.4—No fix listedCNA
AccessPress Themesbloger1.2.6 – 1.2.6—No fix listedCNA
AccessPress Themesbrovy1.3 – 1.3—No fix listedCNA
AccessPress Themesconstruction-lite1.2.5 – 1.2.5—No fix listedCNA
AccessPress Themesdoko1.0.27 – 1.0.27—No fix listedCNA
AccessPress Themesedict-lite1.1.4 – 1.1.4—No fix listedCNA
AccessPress Themesenlighten1.3.5 – 1.3.5—No fix listedCNA
AccessPress Themesfotography2.4.0 – 2.4.0—No fix listedCNA
AccessPress Themesopstore1.4.3 – 1.4.3—No fix listedCNA
AccessPress Themesparallaxsome1.3.6 – 1.3.6—No fix listedCNA
AccessPress Themespunte1.1.2 – 1.1.2—No fix listedCNA
AccessPress Themesrevolve1.3.1 – 1.3.1—No fix listedCNA
AccessPress Themesripple1.2.0 – 1.2.0—No fix listedCNA
AccessPress Themessakala1.0.4 – 1.0.4—No fix listedCNA
AccessPress Themesscrollme2.1.0 – 2.1.0—No fix listedCNA
AccessPress Themesstorevilla1.4.1 – 1.4.1—No fix listedCNA
AccessPress Themesswing-lite1.1.9 – 1.1.9—No fix listedCNA
AccessPress Themesswing-lite1.1.9 – 1.1.9—No fix listedCNA
AccessPress Themesthe1001.1.2 – 1.1.2—No fix listedCNA
AccessPress Themesthe-launcher1.3.2 – 1.3.2—No fix listedCNA
AccessPress Themesthe-monday1.4.1 – 1.4.1—No fix listedCNA
AccessPress Themesultra-seven1.2.8 – 1.2.8—No fix listedCNA
AccessPress Themesuncode-lite1.3.3 – 1.3.3—No fix listedCNA
AccessPress Themesvmag1.2.7 – 1.2.7—No fix listedCNA
AccessPress Themesvmagazine-lite1.3.5 – 1.3.5—No fix listedCNA
AccessPress Themesvmagazine-news1.0.5 – 1.0.5—No fix listedCNA
AccessPress Themeswpparallax2.0.6 – 2.0.6—No fix listedCNA
AccessPress Themeswp-store1.1.9 – 1.1.9—No fix listedCNA
AccessPress Themeszigcy-baby1.0.6 – 1.0.6—No fix listedCNA
AccessPress Themeszigcy-cosmetics1.0.5 – 1.0.5—No fix listedCNA
AccessPress Themeszigcy-lite2.0.9 – 2.0.9—No fix listedCNA
  • Access Demo Importer VendorAccessPress Themes Affected 1.0.6 – 1.0.6 Fixed in — No fix listed CNA
  • accesspress-basic VendorAccessPress Themes Affected 3.2.1 – 3.2.1 Fixed in — No fix listed CNA
  • accesspress-lite VendorAccessPress Themes Affected 2.9.2 – 2.9.2 Fixed in — No fix listed CNA
  • accesspress-mag VendorAccessPress Themes Affected 2.6.5 – 2.6.5 Fixed in — No fix listed CNA
  • accesspress-parallax VendorAccessPress Themes Affected 4.5 – 4.5 Fixed in — No fix listed CNA
  • accesspress-root VendorAccessPress Themes Affected 2.5 – 2.5 Fixed in — No fix listed CNA
  • accesspress-store VendorAccessPress Themes Affected 2.4.9 – 2.4.9 Fixed in — No fix listed CNA
  • agency-lite VendorAccessPress Themes Affected 1.1.6 – 1.1.6 Fixed in — No fix listed CNA
  • arrival VendorAccessPress Themes Affected 1.4.2 – 1.4.2 Fixed in — No fix listed CNA
  • bingle VendorAccessPress Themes Affected 1.0.4 – 1.0.4 Fixed in — No fix listed CNA
  • bloger VendorAccessPress Themes Affected 1.2.6 – 1.2.6 Fixed in — No fix listed CNA
  • brovy VendorAccessPress Themes Affected 1.3 – 1.3 Fixed in — No fix listed CNA
  • construction-lite VendorAccessPress Themes Affected 1.2.5 – 1.2.5 Fixed in — No fix listed CNA
  • doko VendorAccessPress Themes Affected 1.0.27 – 1.0.27 Fixed in — No fix listed CNA
  • edict-lite VendorAccessPress Themes Affected 1.1.4 – 1.1.4 Fixed in — No fix listed CNA
  • enlighten VendorAccessPress Themes Affected 1.3.5 – 1.3.5 Fixed in — No fix listed CNA
  • fotography VendorAccessPress Themes Affected 2.4.0 – 2.4.0 Fixed in — No fix listed CNA
  • opstore VendorAccessPress Themes Affected 1.4.3 – 1.4.3 Fixed in — No fix listed CNA
  • parallaxsome VendorAccessPress Themes Affected 1.3.6 – 1.3.6 Fixed in — No fix listed CNA
  • punte VendorAccessPress Themes Affected 1.1.2 – 1.1.2 Fixed in — No fix listed CNA
  • revolve VendorAccessPress Themes Affected 1.3.1 – 1.3.1 Fixed in — No fix listed CNA
  • ripple VendorAccessPress Themes Affected 1.2.0 – 1.2.0 Fixed in — No fix listed CNA
  • sakala VendorAccessPress Themes Affected 1.0.4 – 1.0.4 Fixed in — No fix listed CNA
  • scrollme VendorAccessPress Themes Affected 2.1.0 – 2.1.0 Fixed in — No fix listed CNA
  • storevilla VendorAccessPress Themes Affected 1.4.1 – 1.4.1 Fixed in — No fix listed CNA
  • swing-lite VendorAccessPress Themes Affected 1.1.9 – 1.1.9 Fixed in — No fix listed CNA
  • swing-lite VendorAccessPress Themes Affected 1.1.9 – 1.1.9 Fixed in — No fix listed CNA
  • the100 VendorAccessPress Themes Affected 1.1.2 – 1.1.2 Fixed in — No fix listed CNA
  • the-launcher VendorAccessPress Themes Affected 1.3.2 – 1.3.2 Fixed in — No fix listed CNA
  • the-monday VendorAccessPress Themes Affected 1.4.1 – 1.4.1 Fixed in — No fix listed CNA
  • ultra-seven VendorAccessPress Themes Affected 1.2.8 – 1.2.8 Fixed in — No fix listed CNA
  • uncode-lite VendorAccessPress Themes Affected 1.3.3 – 1.3.3 Fixed in — No fix listed CNA
  • vmag VendorAccessPress Themes Affected 1.2.7 – 1.2.7 Fixed in — No fix listed CNA
  • vmagazine-lite VendorAccessPress Themes Affected 1.3.5 – 1.3.5 Fixed in — No fix listed CNA
  • vmagazine-news VendorAccessPress Themes Affected 1.0.5 – 1.0.5 Fixed in — No fix listed CNA
  • wpparallax VendorAccessPress Themes Affected 2.0.6 – 2.0.6 Fixed in — No fix listed CNA
  • wp-store VendorAccessPress Themes Affected 1.1.9 – 1.1.9 Fixed in — No fix listed CNA
  • zigcy-baby VendorAccessPress Themes Affected 1.0.6 – 1.0.6 Fixed in — No fix listed CNA
  • zigcy-cosmetics VendorAccessPress Themes Affected 1.0.5 – 1.0.5 Fixed in — No fix listed CNA
  • zigcy-lite VendorAccessPress Themes Affected 2.0.9 – 2.0.9 Fixed in — No fix listed CNA

CPE configurations NVD · 43

CPEVersionsRoleVendor
cpe:2.3:a:accesspressthemes:access_demo_importer:*:*:*:*:*:wordpress:*:*before 1.0.7VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:accesspress-lite:*:*:*:*:*:wordpress:*:*up to 2.92VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:accesspress-mag:*:*:*:*:*:wordpress:*:*up to 2.6.5VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:accesspress-parallax:*:*:*:*:*:wordpress:*:*up to 4.5VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:accesspress-root:*:*:*:*:*:wordpress:*:*up to 2.5VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:accesspress-store:*:*:*:*:*:wordpress:*:*up to 2.4.9VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:accesspress_basic:*:*:*:*:*:wordpress:*:*up to 3.2.1VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:agency-lite:*:*:*:*:*:wordpress:*:*up to 1.1.6VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:arrival:*:*:*:*:*:wordpress:*:*up to 1.4.2VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:bingle:*:*:*:*:*:wordpress:*:*up to 1.0.4VulnerableAccessPress Themes
  • cpe:2.3:a:accesspressthemes:access_demo_importer:*:*:*:*:*:wordpress:*:* Versions before 1.0.7 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:accesspress-lite:*:*:*:*:*:wordpress:*:* Versions up to 2.92 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:accesspress-mag:*:*:*:*:*:wordpress:*:* Versions up to 2.6.5 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:accesspress-parallax:*:*:*:*:*:wordpress:*:* Versions up to 4.5 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:accesspress-root:*:*:*:*:*:wordpress:*:* Versions up to 2.5 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:accesspress-store:*:*:*:*:*:wordpress:*:* Versions up to 2.4.9 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:accesspress_basic:*:*:*:*:*:wordpress:*:* Versions up to 3.2.1 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:agency-lite:*:*:*:*:*:wordpress:*:* Versions up to 1.1.6 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:arrival:*:*:*:*:*:wordpress:*:* Versions up to 1.4.2 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:bingle:*:*:*:*:*:wordpress:*:* Versions up to 1.0.4 Vulnerable ·AccessPress Themes
Show 33 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:accesspressthemes:bloger:*:*:*:*:*:wordpress:*:*up to 1.2.6VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:brovy:*:*:*:*:*:wordpress:*:*up to 1.3VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:construction-lite:*:*:*:*:*:wordpress:*:*up to 1.2.5VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:doko:*:*:*:*:*:wordpress:*:*up to 1.0.27VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:edict-lite:*:*:*:*:*:wordpress:*:*up to 1.1.4VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:eight-sec:*:*:*:*:*:wordpress:*:*up to 1.1.4VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:eightlaw-lite:*:*:*:*:*:wordpress:*:*up to 2.1.5VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:eightmedi-lite:*:*:*:*:*:wordpress:*:*up to 2.1.8VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:eightstore-lite:*:*:*:*:*:wordpress:*:*up to 1.2.5VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:enlighten:*:*:*:*:*:wordpress:*:*up to 1.3.5VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:fotography:*:*:*:*:*:wordpress:*:*up to 2.4.0VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:opstore:*:*:*:*:*:wordpress:*:*up to 1.4.3VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:parallaxsome:*:*:*:*:*:wordpress:*:*up to 1.3.6VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:punte:*:*:*:*:*:wordpress:*:*up to 1.1.2VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:revolve:*:*:*:*:*:wordpress:*:*up to 1.3.1VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:ripple:*:*:*:*:*:wordpress:*:*up to 1.2.0VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:sakala:*:*:*:*:*:wordpress:*:*up to 1.0.4VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:scrollme:*:*:*:*:*:wordpress:*:*up to 2.1.0VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:storevilla:*:*:*:*:*:wordpress:*:*up to 1.4.1VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:swing-lite:*:*:*:*:*:wordpress:*:*up to 1.1.9VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:the-launcher:*:*:*:*:*:wordpress:*:*up to 1.3.2VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:the-monday:*:*:*:*:*:wordpress:*:*up to 1.4.1VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:the100:*:*:*:*:*:wordpress:*:*up to 1.1.2VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:ultra-seven:*:*:*:*:*:wordpress:*:*up to 1.2.8VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:uncode-lite:*:*:*:*:*:wordpress:*:*up to 1.3.3VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:vmag:*:*:*:*:*:wordpress:*:*up to 1.2.7VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:vmagazine-lite:*:*:*:*:*:wordpress:*:*up to 1.3.5VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:vmagazine-news:*:*:*:*:*:wordpress:*:*up to 1.0.5VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:wp-store:*:*:*:*:*:wordpress:*:*up to 1.1.9VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:wpparallax:*:*:*:*:*:wordpress:*:*up to 2.0.6VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:zigcy-baby:*:*:*:*:*:wordpress:*:*up to 1.0.6VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:zigcy-cosmetics:*:*:*:*:*:wordpress:*:*up to 1.0.5VulnerableAccessPress Themes
cpe:2.3:a:accesspressthemes:zigcy-lite:*:*:*:*:*:wordpress:*:*up to 2.0.9VulnerableAccessPress Themes
  • cpe:2.3:a:accesspressthemes:bloger:*:*:*:*:*:wordpress:*:* Versions up to 1.2.6 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:brovy:*:*:*:*:*:wordpress:*:* Versions up to 1.3 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:construction-lite:*:*:*:*:*:wordpress:*:* Versions up to 1.2.5 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:doko:*:*:*:*:*:wordpress:*:* Versions up to 1.0.27 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:edict-lite:*:*:*:*:*:wordpress:*:* Versions up to 1.1.4 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:eight-sec:*:*:*:*:*:wordpress:*:* Versions up to 1.1.4 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:eightlaw-lite:*:*:*:*:*:wordpress:*:* Versions up to 2.1.5 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:eightmedi-lite:*:*:*:*:*:wordpress:*:* Versions up to 2.1.8 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:eightstore-lite:*:*:*:*:*:wordpress:*:* Versions up to 1.2.5 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:enlighten:*:*:*:*:*:wordpress:*:* Versions up to 1.3.5 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:fotography:*:*:*:*:*:wordpress:*:* Versions up to 2.4.0 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:opstore:*:*:*:*:*:wordpress:*:* Versions up to 1.4.3 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:parallaxsome:*:*:*:*:*:wordpress:*:* Versions up to 1.3.6 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:punte:*:*:*:*:*:wordpress:*:* Versions up to 1.1.2 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:revolve:*:*:*:*:*:wordpress:*:* Versions up to 1.3.1 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:ripple:*:*:*:*:*:wordpress:*:* Versions up to 1.2.0 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:sakala:*:*:*:*:*:wordpress:*:* Versions up to 1.0.4 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:scrollme:*:*:*:*:*:wordpress:*:* Versions up to 2.1.0 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:storevilla:*:*:*:*:*:wordpress:*:* Versions up to 1.4.1 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:swing-lite:*:*:*:*:*:wordpress:*:* Versions up to 1.1.9 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:the-launcher:*:*:*:*:*:wordpress:*:* Versions up to 1.3.2 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:the-monday:*:*:*:*:*:wordpress:*:* Versions up to 1.4.1 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:the100:*:*:*:*:*:wordpress:*:* Versions up to 1.1.2 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:ultra-seven:*:*:*:*:*:wordpress:*:* Versions up to 1.2.8 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:uncode-lite:*:*:*:*:*:wordpress:*:* Versions up to 1.3.3 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:vmag:*:*:*:*:*:wordpress:*:* Versions up to 1.2.7 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:vmagazine-lite:*:*:*:*:*:wordpress:*:* Versions up to 1.3.5 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:vmagazine-news:*:*:*:*:*:wordpress:*:* Versions up to 1.0.5 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:wp-store:*:*:*:*:*:wordpress:*:* Versions up to 1.1.9 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:wpparallax:*:*:*:*:*:wordpress:*:* Versions up to 2.0.6 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:zigcy-baby:*:*:*:*:*:wordpress:*:* Versions up to 1.0.6 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:zigcy-cosmetics:*:*:*:*:*:wordpress:*:* Versions up to 1.0.5 Vulnerable ·AccessPress Themes
  • cpe:2.3:a:accesspressthemes:zigcy-lite:*:*:*:*:*:wordpress:*:* Versions up to 2.0.9 Vulnerable ·AccessPress Themes

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-39317
  2. 2026-10-03 Alias added: GHSA-737m-cr75-9hw3

References

Exploit 1

Patch 2

Advisory 1

  • TI-2022-07941 Cross-site request forgery in AccessPress Themes Access Demo Importer CVSS 3.1HIGH 8.1
  • TI-2022-07940 Cross-site request forgery in AccessPress Themes Access Demo Importer CVSS 3.1MEDIUM 6.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences