Log in Start free

Vulnerability · Published Oct 11, 2021 · Assigned by Wordfence

CVE-2021-39317AccessPress Themes - Authenticated Malicious File Upload

High 8.8

In plain English

A high-severity unrestricted file upload in Access Demo Importer from AccessPress Themes. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.7% (higher than 77% of all known vulnerabilities).

Severity (CVSS 3.1)8.8High
Exploit odds (30 days)1.7%top 22.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A WordPress plugin and several WordPress themes developed by AccessPress Themes are vulnerable to malicious file uploads via the plugin_offline_installer AJAX action due to a missing capability check in the plugin_offline_installer_callback function found in the /demo-functions.php file or /welcome.php file of the affected products. The complete list of affected products and their versions are below: WordPress Plugin: AccessPress Demo Importer <=1.0.6 WordPress Themes: accesspress-basic <= 3.2.1 accesspress-lite <= 2.92 accesspress-mag <= 2.6.5 accesspress-parallax <= 4.5 accesspress-root <= 2.5 accesspress-store <= 2.4.9 agency-lite <= 1.1.6 arrival <= 1.4.2 bingle <= 1.0.4 bloger <= 1.2.6 brovy <= 1.3 construction-lite <= 1.2.5 doko <= 1.0.27 edict-lite <= 1.1.4 eightlaw-lite <= 2.1.5 eightmedi-lite <= 2.1.8 eight-sec <= 1.1.4 eightstore-lite <= 1.2.5 enlighten <= 1.3.5 fotography <= 2.4.0 opstore <= 1.4.3 parallaxsome <= 1.3.6 punte <= 1.1.2 revolve <= 1.3.1 ripple <= 1.2.0 sakala <= 1.0.4 scrollme <= 2.1.0 storevilla <= 1.4.1 swing-lite <= 1.1.9 the100 <= 1.1.2 the-launcher <= 1.3.2 the-monday <= 1.4.1 ultra-seven <= 1.2.8 uncode-lite <= 1.3.3 vmag <= 1.2.7 vmagazine-lite <= 1.3.5 vmagazine-news <= 1.0.5 wpparallax <= 2.0.6 wp-store <= 1.1.9 zigcy-baby <= 1.0.6 zigcy-cosmetics <= 1.0.5 zigcy-lite <= 2.0.9

Affected products (as reported)

VendorProductVersions
AccessPress Themes Access Demo Importer 1.0.6 – through 1.0.6
AccessPress Themes accesspress-basic 3.2.1 – through 3.2.1
AccessPress Themes accesspress-lite 2.9.2 – through 2.9.2
AccessPress Themes accesspress-mag 2.6.5 – through 2.6.5
AccessPress Themes accesspress-parallax 4.5 – through 4.5
AccessPress Themes accesspress-root 2.5 – through 2.5
AccessPress Themes accesspress-store 2.4.9 – through 2.4.9
AccessPress Themes agency-lite 1.1.6 – through 1.1.6
AccessPress Themes arrival 1.4.2 – through 1.4.2
AccessPress Themes bingle 1.0.4 – through 1.0.4
AccessPress Themes bloger 1.2.6 – through 1.2.6
AccessPress Themes brovy 1.3 – through 1.3
AccessPress Themes construction-lite 1.2.5 – through 1.2.5
AccessPress Themes doko 1.0.27 – through 1.0.27
AccessPress Themes edict-lite 1.1.4 – through 1.1.4
AccessPress Themes enlighten 1.3.5 – through 1.3.5
AccessPress Themes fotography 2.4.0 – through 2.4.0
AccessPress Themes opstore 1.4.3 – through 1.4.3
AccessPress Themes parallaxsome 1.3.6 – through 1.3.6
AccessPress Themes punte 1.1.2 – through 1.1.2
AccessPress Themes revolve 1.3.1 – through 1.3.1
AccessPress Themes ripple 1.2.0 – through 1.2.0
AccessPress Themes sakala 1.0.4 – through 1.0.4
AccessPress Themes scrollme 2.1.0 – through 2.1.0
AccessPress Themes storevilla 1.4.1 – through 1.4.1
AccessPress Themes swing-lite 1.1.9 – through 1.1.9
AccessPress Themes swing-lite 1.1.9 – through 1.1.9
AccessPress Themes the100 1.1.2 – through 1.1.2
AccessPress Themes the-launcher 1.3.2 – through 1.3.2
AccessPress Themes the-monday 1.4.1 – through 1.4.1

Weakness: CWE-285, CWE-434 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References