Skip to content
OpenAdvisories

Vendor

AccessPress Themes

7 known vulnerabilities.

AccessPress Themes at a glance

Last 12 months
1
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 1 vulnerability June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202610
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

Social Auto Poster 2 AccessPress Social Icons 2 WP TFeed 2 Access Demo Importer (WordPress plugin) 2 Access Demo Importer 1 accesspress-basic 1 accesspress-lite 1 accesspress-mag 1 accesspress-parallax 1 accesspress-root 1 accesspress-store 1 agency-lite 1 arrival 1 bingle 1 bloger 1 Frontend Post WordPress Plugin – AccessPress Anonymous Post 1 brovy 1 AccessPress Custom CSS 1 construction-lite 1 AccessPress Custom Post Type 1 doko 1 edict-lite 1 AccessPress iFeeds 1 enlighten 1 PI Button 1 fotography 1 AccessPress Social Counter 1 opstore 1 parallaxsome 1 AccessPress Social Login Lite – Social Login WordPress Plugin 1 punte 1 AccessPress Social Share 1 revolve 1 TAuto Poster 1 ripple 1 sakala 1 Effectively Add & Customize Free Icons For WordPress Menus – WP Menu Icons Lite 1 scrollme 1 AP Companion 1 storevilla 1
All Critical High Medium Low Exploited only Public exploit

7 results · Feed

  • Medium 6.4
    CVE-2021-47910

    WordPress Plugin AccessPress Social Icons 1.8.2 Stored XSS

    AccessPress Social Icons 1.8.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by entering JavaScript payloads into the 'icon title' field. Attackers can store XSS payloads like image tags w…

    AccessPress Themes AccessPress Social Icons Web / CMS
  • Medium 5.4
    CVE-2023-26532

    WordPress Social Auto Poster Plugin <= 2.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in AccessPress Themes Social Auto Poster plugin <= 2.1.4 versions.

    AccessPress Themes Social Auto Poster
  • Medium 5.4
    CVE-2023-26518

    WordPress WP TFeed Plugin <= 1.6.9 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in AccessPress Themes WP TFeed plugin <= 1.6.9 versions.

    AccessPress Themes WP TFeed
  • Medium 6.5
    CVE-2022-23975

    WordPress Access Demo Importer plugin <= 1.0.7 - Cross-Site Request Forgery (CSRF) vulnerability leading to Arbitrary Plugin Activation

    Cross-Site Request Forgery (CSRF) in Access Demo Importer <= 1.0.7 on WordPress allows an attacker to activate any installed plugin.

    AccessPress Themes Access Demo Importer (WordPress plugin) Web / CMS
  • High 8.1
    CVE-2022-23976

    WordPress Access Demo Importer plugin <= 1.0.7 - Cross-Site Request Forgery (CSRF) vulnerability leading to Data Reset (Posts / Pages / Media)

    Cross-Site Request Forgery (CSRF) in Access Demo Importer <= 1.0.7 on WordPress allows an attacker to reset all data (posts / pages / media).

    AccessPress Themes Access Demo Importer (WordPress plugin) Web / CMS
  • Unscored —
    CVE-2021-24867 EPSS 18%

    Backdoored Plugins & Themes from AccessPress Themes

    Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However,…

    AccessPress Themes WP TFeed Social Auto Poster AccessPress Social Icons Web / CMS
  • High 8.8
    CVE-2021-39317

    AccessPress Themes - Authenticated Malicious File Upload

    A WordPress plugin and several WordPress themes developed by AccessPress Themes are vulnerable to malicious file uploads via the plugin_offline_installer AJAX action due to a missing capability check in the plugin_offline_installer_callback function found in …

    AccessPress Themes accesspress-root ripple zigcy-cosmetics Web / CMS