{"id":"CVE-2021-24867","details":"Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusion","modified":"2026-04-10T04:30:56.207086Z","published":"2022-02-21T11:15:08.320Z","references":[{"type":"EVIDENCE","url":"https://jetpack.com/2022/01/18/backdoor-found-in-themes-and-plugins-from-accesspress-themes/"},{"type":"EVIDENCE","url":"https://wpscan.com/vulnerability/9c76bada-fa32-4c2f-9855-d0efd1e63eff"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/Rockhopper-Technologies/enlighten","events":[{"introduced":"0"},{"fixed":"65170899ff20b9c3a57a20ad898e33fbabc669b8"},{"introduced":"0"},{"last_affected":"bb19ff50f223bfeb0c9c9693e837702ecd74b47f"},{"introduced":"0"},{"last_affected":"bb19ff50f223bfeb0c9c9693e837702ecd74b47f"},{"introduced":"0"},{"last_affected":"f7381cba9b257d2e1fe8265f81ac4f276302b0e2"},{"introduced":"0"},{"last_affected":"65170899ff20b9c3a57a20ad898e33fbabc669b8"},{"introduced":"0"},{"last_affected":"65170899ff20b9c3a57a20ad898e33fbabc669b8"},{"introduced":"0"},{"last_affected":"65170899ff20b9c3a57a20ad898e33fbabc669b8"},{"introduced":"0"},{"last_affected":"f7381cba9b257d2e1fe8265f81ac4f276302b0e2"},{"introduced":"0"},{"last_affected":"65170899ff20b9c3a57a20ad898e33fbabc669b8"},{"introduced":"0"},{"last_affected":"f7381cba9b257d2e1fe8265f81ac4f276302b0e2"},{"introduced":"0"},{"last_affected":"56fc5537cc72327856c002dd639fd068c3fe0210"},{"introduced":"0"},{"last_affected":"22a4c61aa178fb73206ea2b774355f41ad89e871"},{"introduced":"0"},{"last_affected":"fac3e495923a3ae6681a607d87da4ca39a6cdf14"},{"introduced":"0"},{"last_affected":"1546e7e3fd8666b0dee85bba314bfae39bf274a5"},{"introduced":"0"},{"last_affected":"56fc5537cc72327856c002dd639fd068c3fe0210"},{"introduced":"0"},{"last_affected":"f7381cba9b257d2e1fe8265f81ac4f276302b0e2"},{"introduced":"0"},{"last_affected":"65170899ff20b9c3a57a20ad898e33fbabc669b8"},{"introduced":"0"},{"last_affected":"bb19ff50f223bfeb0c9c9693e837702ecd74b47f"}],"database_specific":{"versions":[{"introduced":"0"},{"fixed":"1.0.7"},{"introduced":"0"},{"last_affected":"1.0.6"},{"introduced":"0"},{"last_affected":"1.0.6"},{"introduced":"0"},{"last_affected":"1.1.0"},{"introduced":"0"},{"last_affected":"1.0.7"},{"introduced":"0"},{"last_affected":"1.0.7"},{"introduced":"0"},{"last_affected":"1.0.7"},{"introduced":"0"},{"last_affected":"1.1.0"},{"introduced":"0"},{"last_affected":"1.0.7"},{"introduced":"0"},{"last_affected":"1.1.0"},{"introduced":"0"},{"last_affected":"1.3.1"},{"introduced":"0"},{"last_affected":"1.2.0"},{"introduced":"0"},{"last_affected":"1.3.2"},{"introduced":"0"},{"last_affected":"1.5.0"},{"introduced":"0"},{"last_affected":"1.3.1"},{"introduced":"0"},{"last_affected":"1.1.0"},{"introduced":"0"},{"last_affected":"1.0.7"},{"introduced":"0"},{"last_affected":"1.0.6"}]}}],"versions":["1.0.6","1.0.7","1.1.0","1.2.0","1.3.0","1.3.1","1.3.2","1.3.3","1.4.0","1.5.0"],"database_specific":{"unresolved_ranges":[{"events":[{"introduced":"0"},{"last_affected":"1.0.0"}]},{"events":[{"introduced":"0"},{"last_affected":"2.8.0"}]},{"events":[{"introduced":"0"},{"last_affected":"3.2.1"}]},{"events":[{"introduced":"0"},{"last_affected":"2.0.1"}]},{"events":[{"introduced":"0"},{"last_affected":"1.0.8"}]},{"events":[{"introduced":"0"},{"last_affected":"4.0.3"}]},{"events":[{"introduced":"0"},{"last_affected":"2.92"}]},{"events":[{"introduced":"0"},{"last_affected":"2.6.5"}]},{"events":[{"introduced":"0"},{"last_affected":"4.5"}]},{"events":[{"introduced":"0"},{"last_affected":"1.19.5"}]},{"events":[{"introduced":"0"},{"last_affected":"2.5"}]},{"events":[{"introduced":"0"},{"last_affected":"1.9.1"}]},{"events":[{"introduced":"0"},{"last_affected":"1.8.2"}]},{"events":[{"introduced":"0"},{"last_affected":"3.4.7"}]},{"events":[{"introduced":"0"},{"last_affected":"4.5.5"}]},{"events":[{"introduced":"0"},{"last_affected":"1.9.1"}]},{"events":[{"introduced":"0"},{"last_affected":"2.4.9"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.6"}]},{"events":[{"introduced":"0"},{"last_affected":"1.4.6"}]},{"events":[{"introduced":"0"},{"last_affected":"3.0.5"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.2"}]},{"events":[{"introduced":"0"},{"last_affected":"2.0.4"}]},{"events":[{"introduced":"0"},{"last_affected":"1.0.4"}]},{"events":[{"introduced":"0"},{"last_affected":"1.2.6"}]},{"events":[{"introduced":"0"},{"last_affected":"1.2.5"}]},{"events":[{"introduced":"0"},{"last_affected":"1.0.27"}]},{"events":[{"introduced":"0"},{"last_affected":"1.3.5"}]},{"events":[{"introduced":"0"},{"last_affected":"2.0.4"}]},{"events":[{"introduced":"0"},{"last_affected":"2.0.7"}]},{"events":[{"introduced":"0"},{"last_affected":"1.0.8"}]},{"events":[{"introduced":"0"},{"last_affected":"1.0.8"}]},{"events":[{"introduced":"0"},{"last_affected":"1.0.9"}]},{"events":[{"introduced":"0"},{"last_affected":"2.0.3"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.1"}]},{"events":[{"introduced":"0"},{"last_affected":"1.2.1"}]},{"events":[{"introduced":"0"},{"last_affected":"1.0.9"}]},{"events":[{"introduced":"0"},{"last_affected":"2.4.0"}]},{"events":[{"introduced":"0"},{"last_affected":"1.0.8"}]},{"events":[{"introduced":"0"},{"last_affected":"1.4.2"}]},{"events":[{"introduced":"0"},{"fixed":"2.0.7"}]},{"events":[{"introduced":"0"},{"last_affected":"2.2.8"}]},{"events":[{"introduced":"0"},{"last_affected":"3.1.1574941215"}]},{"events":[{"introduced":"0"},{"last_affected":"1.3.6"}]},{"events":[{"introduced":"0"},{"last_affected":"3.3.3"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.5"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.2"}]},{"events":[{"introduced":"0"},{"last_affected":"2.1.0"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.7"}]},{"events":[{"introduced":"0"},{"last_affected":"2.0.8"}]},{"events":[{"introduced":"0"},{"last_affected":"1.0.3"}]},{"events":[{"introduced":"0"},{"last_affected":"2.1.3"}]},{"events":[{"introduced":"0"},{"fixed":"1.0.9"}]},{"events":[{"introduced":"0"},{"last_affected":"1.2.1"}]},{"events":[{"introduced":"0"},{"last_affected":"1.4.1"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.9"}]},{"events":[{"introduced":"0"},{"last_affected":"1.4.5"}]},{"events":[{"introduced":"0"},{"last_affected":"1.4.1"}]},{"events":[{"introduced":"0"},{"last_affected":"1.0.4"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.1"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.2"}]},{"events":[{"introduced":"0"},{"last_affected":"1.2.6"}]},{"events":[{"introduced":"0"},{"last_affected":"1.2.7"}]},{"events":[{"introduced":"0"},{"last_affected":"1.3.5"}]},{"events":[{"introduced":"0"},{"last_affected":"1.0.5"}]},{"events":[{"introduced":"0"},{"last_affected":"1.2.9"}]},{"events":[{"introduced":"0"},{"last_affected":"2.0.3"}]},{"events":[{"introduced":"0"},{"last_affected":"1.4.4"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.2"}]},{"events":[{"introduced":"0"},{"fixed":"1.0.9"}]},{"events":[{"introduced":"0"},{"last_affected":"1.2.3"}]},{"events":[{"introduced":"0"},{"last_affected":"1.0.8"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.1"}]},{"events":[{"introduced":"0"},{"last_affected":"1.6.7"}]},{"events":[{"introduced":"0"},{"last_affected":"1.0.5"}]},{"events":[{"introduced":"0"},{"last_affected":"2.0.9"}]}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-24867.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}