title: Backdoored Plugins & Themes from AccessPress Themes
description: Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusion
problem types: CWE-912 Hidden Functionality
affected:
{
product: Frontend Post WordPress Plugin – AccessPress Anonymous Post
vendor: AccessPress Themes
versions:
lessThan: 2.8.0*, status: affected, version: 2.8.0, versionType: custom
lessThan: 2.8.1, status: affected, version: 2.8.1, versionType: custom
}
{
product: AccessPress Custom CSS
vendor: AccessPress Themes
versions:
lessThan: 2.0.1*, status: affected, version: 2.0.1, versionType: custom
lessThan: 2.0.2, status: affected, version: 2.0.2, versionType: custom
}
{
product: AccessPress Custom Post Type
vendor: AccessPress Themes
versions:
lessThan: 1.0.8*, status: affected, version: 1.0.8, versionType: custom
lessThan: 1.0.9, status: affected, version: 1.0.9, versionType: custom
}
{
product: Social Auto Poster
vendor: AccessPress Themes
versions:
lessThan: 2.1.3*, status: affected, version: 2.1.3, versionType: custom
lessThan: 2.1.4, status: affected, version: 2.1.4, versionType: custom
}
{
product: AccessPress iFeeds
vendor: AccessPress Themes
versions:
lessThan: 4.0.3*, status: affected, version: 4.0.3, versionType: custom
lessThan: 4.0.4, status: affected, version: 4.0.4, versionType: custom
}
{
product: PI Button
vendor: AccessPress Themes
versions:
lessThan: 3.3.3*, status: affected, version: 3.3.3, versionType: custom
lessThan: 3.3.4, status: affected, version: 3.3.4, versionType: custom
}
{
product: AccessPress Social Counter
vendor: AccessPress Themes
versions:
lessThan: 1.9.1*, status: affected, version: 1.9.1, versionType: custom
lessThan: 1.9.2, status: affected, version: 1.9.2, versionType: custom
}
{
product: AccessPress Social Icons
vendor: AccessPress Themes
versions:
lessThan: 1.8.2*, status: affected, version: 1.8.2, versionType: custom
lessThan: 1.8.3, status: affected, version: 1.8.3, versionType: custom
}
{
product: AccessPress Social Login Lite – Social Login WordPress Plugin
vendor: AccessPress Themes
versions:
lessThan: 3.4.7*, status: affected, version: 3.4.7, versionType: custom
lessThan: 3.4.8, status: affected, version: 3.4.8, versionType: custom
}
{
product: AccessPress Social Share
vendor: AccessPress Themes
versions:
lessThan: 4.5.5*, status: affected, version: 4.5.5, versionType: custom
lessThan: 4.5.6, status: affected, version: 4.5.6, versionType: custom
}
{
product: TAuto Poster
vendor: AccessPress Themes
versions:
lessThan: 1.4.5*, status: affected, version: 1.4.5, versionType: custom
lessThan: 1.4.6, status: affected, version: 1.4.6, versionType: custom
}
{
product: WP TFeed
vendor: AccessPress Themes
versions:
lessThan: 1.6.7*, status: affected, version: 1.6.7, versionType: custom
lessThan: 1.6.8, status: affected, version: 1.6.8, versionType: custom
}
{
product: Effectively Add & Customize Free Icons For WordPress Menus – WP Menu Icons Lite
vendor: AccessPress Themes
versions:
lessThan: 1.0.9, status: affected, version: 1.0.9, versionType: custom
}
{
product: AP Companion
vendor: AccessPress Themes
versions:
lessThan: 1.0.7, status: affected, version: 1.0.7, versionType: custom
}
{
product: Easiest Contact Form for WordPress – AP Contact Form
vendor: AccessPress Themes
versions:
lessThan: 1.0.6*, status: affected, version: 1.0.6, versionType: custom
lessThan: 1.0.7, status: affected, version: 1.0.7, versionType: custom
}
{
product: Testimonial WordPress Plugin – AP Custom Testimonial
vendor: AccessPress Themes
versions:
lessThan: 1.4.6*, status: affected, version: 1.4.6, versionType: custom
lessThan: 1.4.7, status: affected, version: 1.4.7, versionType: custom
}
{
product: Mega Menu Plugin for WordPress – AP Mega Menu
vendor: AccessPress Themes
versions:
lessThan: 3.0.5*, status: affected, version: 3.0.5, versionType: custom
lessThan: 3.0.6, status: affected, version: 3.0.6, versionType: custom
}
{
product: Pricing Table Builder – AP Pricing Tables Lite
vendor: AccessPress Themes
versions:
changes: [at: 1.1.3, status: unaffected], lessThan: 1.1.3*, status: affected, version: 1.1.3, versionType: custom
}
{
product: Responsive Notification Bar Plugin for WordPress – Apex Notification Bar Lite
vendor: AccessPress Themes
versions:
lessThan: 2.0.4*, status: affected, version: 2.0.4, versionType: custom
lessThan: 2.0.5, status: affected, version: 2.0.5, versionType: custom
}
{
product: Form Store to DB
vendor: AccessPress Themes
versions:
lessThan: 1.0.9*, status: affected, version: 1.0.9, versionType: custom
lessThan: 1.1.0, status: affected, version: 1.1.0, versionType: custom
}
{
product: Comments Disable – AccessPress
vendor: AccessPress Themes
versions:
lessThan: 1.0.7*, status: affected, version: 1.0.7, versionType: custom
lessThan: 1.0.8, status: affected, version: 1.0.8, versionType: custom
}
{
product: CTA plugin for WordPress – Easy Side Tab
vendor: AccessPress Themes
versions:
lessThan: 1.0.7*, status: affected, version: 1.0.7, versionType: custom
lessThan: 1.0.8, status: affected, version: 1.0.8, versionType: custom
}
{
product: WordPress Backend Customizer – Everest Admin Theme Lite
vendor: AccessPress Themes
versions:
lessThan: 1.0.7*, status: affected, version: 1.0.7, versionType: custom
lessThan: 1.0.8, status: affected, version: 1.0.8, versionType: custom
}
{
product: Ultimate Coming Soon, Maintenance Mode Plugin for WordPress – Everest Coming Soon Lite
vendor: AccessPress Themes
versions:
lessThan: 1.1.0*, status: affected, version: 1.1.0, versionType: custom
lessThan: 1.1.1, status: affected, version: 1.1.1, versionType: custom
}
{
product: Free WordPress Plugin To Display Like/Dislike Comment Rating – Everest Comment Rating Lite
vendor: AccessPress Themes
versions:
lessThan: 2.0.4*, status: affected, version: 2.0.4, versionType: custom
lessThan: 2.0.5, status: affected, version: 2.0.5, versionType: custom
}
{
product: Beautiful Stat Counter Plugin for WordPress – Everest Counter Lite
vendor: AccessPress Themes
versions:
lessThan: 2.0.7*, status: affected, version: 2.0.7, versionType: custom
lessThan: 2.0.8, status: affected, version: 2.0.8, versionType: custom
}
{
product: Beautiful FAQ Plugin for WordPress – Everest FAQ Manager Lite
vendor: AccessPress Themes
versions:
lessThan: 1.0.8*, status: affected, version: 1.0.8, versionType: custom
lessThan: 1.0.9, status: affected, version: 1.0.9, versionType: custom
}
{
product: Responsive Media Gallery Plugin for WordPress – Everest Gallery Lite
vendor: AccessPress Themes
versions:
lessThan: 1.0.8*, status: affected, version: 1.0.8, versionType: custom
lessThan: 1.0.9, status: affected, version: 1.0.9, versionType: custom
}
{
product: Everest GPlaces Business Reviews
vendor: AccessPress Themes
versions:
lessThan: 1.0.9*, status: affected, version: 1.0.9, versionType: custom
lessThan: 2.0.0, status: affected, version: 2.0.0, versionType: custom
}
{
product: Everest Review Lite – User/Admin review plugin for WordPress
vendor: AccessPress Themes
versions:
status: affected, version: 1.0.7
}
{
product: Free Responsive Tab Plugin For WordPress – Everest Tab Lite
vendor: AccessPress Themes
versions:
lessThan: 2.0.3*, status: affected, version: 2.0.3, versionType: custom
lessThan: 2.0.4, status: affected, version: 2.0.4, versionType: custom
}
{
product: Responsive WordPress Timeline Plugin – Everest Timeline Lite
vendor: AccessPress Themes
versions:
lessThan: 1.1.1*, status: affected, version: 1.1.1, versionType: custom
lessThan: 1.1.2, status: affected, version: 1.1.2, versionType: custom
}
{
product: Inline Call To Action Builder Lite – Free Call To Action Layer Plugin for WordPress
vendor: AccessPress Themes
versions:
lessThan: 1.1.0*, status: affected, version: 1.1.0, versionType: custom
lessThan: 1.1.1, status: affected, version: 1.1.1, versionType: custom
}
{
product: Product Slider For WooCommerce Lite
vendor: AccessPress Themes
versions:
lessThan: 1.1.5*, status: affected, version: 1.1.5, versionType: custom
lessThan: 1.1.6, status: affected, version: 1.1.6, versionType: custom
}
{
product: Responsive Clients Logo Gallery Plugin for WordPress – Smart Logo Showcase Lite
vendor: AccessPress Themes
versions:
lessThan: 1.1.7*, status: affected, version: 1.1.7, versionType: custom
lessThan: 1.1.8, status: affected, version: 1.1.8, versionType: custom
}
{
product: Smart Scroll Posts for WordPress
vendor: AccessPress Themes
versions:
lessThan: 2.0.8*, status: affected, version: 2.0.8, versionType: custom
lessThan: 2.0.9, status: affected, version: 2.0.9, versionType: custom
}
{
product: Faster and Easier scroll to Top Plugin for WordPress – Smart Scroll to Top Lite
vendor: AccessPress Themes
versions:
lessThan: 1.0.3*, status: affected, version: 1.0.3, versionType: custom
lessThan: 1.0.4, status: affected, version: 1.0.4, versionType: custom
}
{
product: Total GDPR Compliance Lite – WordPress Plugin for GDPR Compatibility
vendor: AccessPress Themes
versions:
status: affected, version: 1.0.4
}
{
product: Total Team Lite – Responsive Team Manager / Showcase Plugin for WordPress
vendor: AccessPress Themes
versions:
lessThan: 1.1.1*, status: affected, version: 1.1.1, versionType: custom
lessThan: 1.1.2, status: affected, version: 1.1.2, versionType: custom
}
{
product: Free Responsive Post/Article Author Section Plugin for WordPress – Ultimate Author Box Lite
vendor: AccessPress Themes
versions:
lessThan: 1.1.2*, status: affected, version: 1.1.2, versionType: custom
lessThan: 1.1.3, status: affected, version: 1.1.3, versionType: custom
}
{
product: Contact Form for WordPress – Ultimate Form Builder Lite
vendor: AccessPress Themes
versions:
lessThan: 1.5.0*, status: affected, version: 1.5.0, versionType: custom
lessThan: 1.5.1, status: affected, version: 1.5.1, versionType: custom
}
{
product: Badge Designer Lite For WooCommerce
vendor: AccessPress Themes
versions:
lessThan: 1.1.0*, status: affected, version: 1.1.0, versionType: custom
lessThan: 1.1.1, status: affected, version: 1.1.1, versionType: custom
}
{
product: WordPress Slider Plugin – WP 1 Slider
vendor: AccessPress Themes
versions:
lessThan: 1.2.9*, status: affected, version: 1.2.9, versionType: custom
lessThan: 1.3.0, status: affected, version: 1.3.0, versionType: custom
}
{
product: Plugin to Manage / Design WordPress Blog – WP Blog Manager Lite
vendor: AccessPress Themes
versions:
lessThan: 1.1.1*, status: affected, version: 1.1.1, versionType: custom
lessThan: 1.1.2, status: affected, version: 1.1.2, versionType: custom
}
{
product: Smartest Way To Design & Customize WordPress Comments & Comment Form – WP Comment Designer Lite
vendor: AccessPress Themes
versions:
lessThan: 2.0.3*, status: affected, version: 2.0.3, versionType: custom
lessThan: 2.0.4, status: affected, version: 2.0.4, versionType: custom
}
{
product: Cookie Notification Plugin for WordPress – WP Cookie User Info
vendor: AccessPress Themes
versions:
lessThan: 1.0.7*, status: affected, version: 1.0.7, versionType: custom
lessThan: 1.0.8, status: affected, version: 1.0.8, versionType: custom
}
{
product: Social Review
vendor: AccessPress Themes
versions:
lessThan: 1.0.9, status: affected, version: 1.0.9, versionType: custom
}
{
product: MContact Button
vendor: AccessPress Themes
versions:
lessThan: 2.0.7, status: affected, version: 2.0.7, versionType: custom
}
{
product: WP Floating Menu – One page navigator, sticky menu for WordPress
vendor: AccessPress Themes
versions:
lessThan: 1.4.4*, status: affected, version: 1.4.4, versionType: custom
lessThan: 1.4.5, status: affected, version: 1.4.5, versionType: custom
}
{
product: The Easiest WordPress Media Manager Plugin – WP Media Manager Lite
vendor: AccessPress Themes
versions:
lessThan: 1.1.2*, status: affected, version: 1.1.2, versionType: custom
lessThan: 1.1.3, status: affected, version: 1.1.3, versionType: custom
}
{
product: WP Popup Banners
vendor: AccessPress Themes
versions:
lessThan: 1.2.3*, status: affected, version: 1.2.3, versionType: custom
lessThan: 1.2.4, status: affected, version: 1.2.4, versionType: custom
}
{
product: WP Popup Lite – Responsive popup plugin for WordPress
vendor: AccessPress Themes
versions:
status: affected, version: 1.0.8
}
{
product: Responsive Products Showcase Listing for WordPress  – WP Product Gallery Lite
vendor: AccessPress Themes
versions:
status: affected, version: 1.1.1
}
{
product: accessbuddy
vendor: AccessPress Themes
versions:
status: affected, version: 1.0.0
}
{
product: Accesspress Basic
vendor: AccessPress Themes
versions:
status: affected, version: 3.2.1
}
{
product: Accesspress Lite
vendor: AccessPress Themes
versions:
status: affected, version: 2.92
}
{
product: Accesspress Mag
vendor: AccessPress Themes
versions:
status: affected, version: 2.6.5
}
{
product: AccessPress Parallax
vendor: AccessPress Themes
versions:
status: affected, version: 4.5
}
{
product: accesspress-ray
vendor: AccessPress Themes
versions:
status: affected, version: 1.19.5
}
{
product: AccessPress Root
vendor: AccessPress Themes
versions:
status: affected, version: 2.5
}
{
product: AccessPress Staple
vendor: AccessPress Themes
versions:
status: affected, version: 1.9.1
}
{
product: AccessPress Store
vendor: AccessPress Themes
versions:
status: affected, version: 2.4.9
}
{
product: Agency Lite
vendor: AccessPress Themes
versions:
status: affected, version: 1.1.6
}
{
product: Aplite
vendor: AccessPress Themes
versions:
status: affected, version: 1.0.6
}
{
product: Bingle
vendor: AccessPress Themes
versions:
status: affected, version: 1.0.4
}
{
product: Bloger
vendor: AccessPress Themes
versions:
status: affected, version: 1.2.6
}
{
product: Construction Lite
vendor: AccessPress Themes
versions:
status: affected, version: 1.2.5
}
{
product: Doko
vendor: AccessPress Themes
versions:
status: affected, version: 1.0.27
}
{
product: Enlighten
vendor: AccessPress Themes
versions:
status: affected, version: 1.3.5
}
{
product: FashStore
vendor: AccessPress Themes
versions:
status: affected, version: 1.2.1
}
{
product: FotoGraphy
vendor: AccessPress Themes
versions:
status: affected, version: 2.4.0
}
{
product: Gaga Corp
vendor: AccessPress Themes
versions:
status: affected, version: 1.0.8
}
{
product: Gaga Lite
vendor: AccessPress Themes
versions:
status: affected, version: 1.4.2 1.0.8
}
{
product: One Paze
vendor: AccessPress Themes
versions:
status: affected, version: 2.2.8
}
{
product: parallax-blog
vendor: AccessPress Themes
versions:
status: affected, version: 3.1.1574941215
}
{
product: ParallaxSome
vendor: AccessPress Themes
versions:
status: affected, version: 1.3.6
}
{
product: Punte
vendor: AccessPress Themes
versions:
status: affected, version: 1.1.2
}
{
product: Revolve
vendor: AccessPress Themes
versions:
status: affected, version: 1.3.1
}
{
product: Ripple
vendor: AccessPress Themes
versions:
status: affected, version: 1.2.0
}
{
product: ScrollMe
vendor: AccessPress Themes
versions:
status: affected, version: 2.1.0
}
{
product: SportsMag
vendor: AccessPress Themes
versions:
status: affected, version: 1.2.1
}
{
product: StoreVilla
vendor: AccessPress Themes
versions:
status: affected, version: 1.4.1
}
{
product: Swing Lite
vendor: AccessPress Themes
versions:
status: affected, version: 1.1.9
}
{
product: The Launcher
vendor: AccessPress Themes
versions:
status: affected, version: 1.3.2
}
{
product: The Monday
vendor: AccessPress Themes
versions:
status: affected, version: 1.4.1
}
{
product: Uncode Lite
vendor: AccessPress Themes
versions:
status: affected, version: 1.3.1
}
{
product: Unicon Lite
vendor: AccessPress Themes
versions:
status: affected, version: 1.2.6
}
{
product: VMag
vendor: AccessPress Themes
versions:
status: affected, version: 1.2.7
}
{
product: VMagazine Lite
vendor: AccessPress Themes
versions:
status: affected, version: 1.3.5
}
{
product: Vmagazine News
vendor: AccessPress Themes
versions:
status: affected, version: 1.0.5
}
{
product: Zigcy Baby
vendor: AccessPress Themes
versions:
status: affected, version: 1.0.6
}
{
product: Zigcy Cosmetics
vendor: AccessPress Themes
versions:
status: affected, version: 1.0.5
}
{
product: Zigcy Lite
vendor: AccessPress Themes
versions:
status: affected, version: 2.0.9
}
