Skip to content
OpenAdvisories

Vendor

AccessPress Themes

7 known vulnerabilities.

Products

Social Auto Poster 2 AccessPress Social Icons 2 WP TFeed 2 Access Demo Importer (WordPress plugin) 2 Access Demo Importer 1 accesspress-basic 1 accesspress-lite 1 accesspress-mag 1 accesspress-parallax 1 accesspress-root 1 accesspress-store 1 agency-lite 1 arrival 1 bingle 1 bloger 1 Frontend Post WordPress Plugin – AccessPress Anonymous Post 1 brovy 1 AccessPress Custom CSS 1 construction-lite 1 AccessPress Custom Post Type 1 doko 1 edict-lite 1 AccessPress iFeeds 1 enlighten 1 PI Button 1 fotography 1 AccessPress Social Counter 1 opstore 1 parallaxsome 1 AccessPress Social Login Lite – Social Login WordPress Plugin 1 punte 1 AccessPress Social Share 1 revolve 1 TAuto Poster 1 ripple 1 sakala 1 Effectively Add & Customize Free Icons For WordPress Menus – WP Menu Icons Lite 1 scrollme 1 AP Companion 1 storevilla 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.4
    CVE-2021-47910

    WordPress Plugin AccessPress Social Icons 1.8.2 Stored XSS

    AccessPress Social Icons 1.8.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by entering JavaScript payloads into the 'icon title' field. Attackers can store XSS payloads like image tags w…

    AccessPress Themes AccessPress Social Icons Web / CMS
  • Medium 5.4
    CVE-2023-26532

    WordPress Social Auto Poster Plugin <= 2.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in AccessPress Themes Social Auto Poster plugin <= 2.1.4 versions.

    AccessPress Themes Social Auto Poster
  • Medium 5.4
    CVE-2023-26518

    WordPress WP TFeed Plugin <= 1.6.9 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in AccessPress Themes WP TFeed plugin <= 1.6.9 versions.

    AccessPress Themes WP TFeed
  • Medium 6.5
    CVE-2022-23975

    WordPress Access Demo Importer plugin <= 1.0.7 - Cross-Site Request Forgery (CSRF) vulnerability leading to Arbitrary Plugin Activation

    Cross-Site Request Forgery (CSRF) in Access Demo Importer <= 1.0.7 on WordPress allows an attacker to activate any installed plugin.

    AccessPress Themes Access Demo Importer (WordPress plugin) Web / CMS