Skip to content
OpenAdvisories

Vendor

AccessPress Themes

7 known vulnerabilities.

2 results · Clear filters · Feed

  • High 8.1

    WordPress Access Demo Importer plugin <= 1.0.7 - Cross-Site Request Forgery (CSRF) vulnerability leading to Data Reset (Posts / Pages / Media)

    Cross-Site Request Forgery (CSRF) in Access Demo Importer <= 1.0.7 on WordPress allows an attacker to reset all data (posts / pages / media).

  • High 8.8

    AccessPress Themes - Authenticated Malicious File Upload

    A WordPress plugin and several WordPress themes developed by AccessPress Themes are vulnerable to malicious file uploads via the plugin_offline_installer AJAX action due to a missing capability check in the plugin_offline_installer_callback function found in …