Vulnerabilities

TI-2022-07940 CVE-2022-23975 · GHSA-2w6f-x8pj-5vcm

Cross-site request forgery in AccessPress Themes Access Demo Importer

LOW 29

Cross-Site Request Forgery (CSRF) in Access Demo Importer <= 1.0.7 on WordPress allows an attacker to activate any installed plugin.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00494 Published 2022-04-18 No fix listed CWE-352

TI-2022-07941 CVE-2022-23976 · GHSA-fxxg-mjjq-cmfg

Cross-site request forgery in AccessPress Themes Access Demo Importer

LOW 36

Cross-Site Request Forgery (CSRF) in Access Demo Importer <= 1.0.7 on WordPress allows an attacker to reset all data (posts / pages / media).

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.0048 Published 2022-04-18 No fix listed CWE-352

TI-2021-16689 CVE-2021-39317 · GHSA-737m-cr75-9hw3

AccessPress Themes - Authenticated Malicious File Upload

MEDIUM 43

A WordPress plugin and several WordPress themes developed by AccessPress Themes are vulnerable to malicious file uploads via the plugin_offline_installer AJAX action due to a missing capability check in the plugin_offlin…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01706 Published 2021-10-11 No fix listed CWE-285

Vulnerabilities

Filters

Cross-site request forgery in AccessPress Themes Access Demo Importer

Cross-site request forgery in AccessPress Themes Access Demo Importer

AccessPress Themes - Authenticated Malicious File Upload