Vulnerability · Published May 10, 2026 · Assigned by VulnCheck

CVE-2021-47910WordPress Plugin AccessPress Social Icons 1.8.2 Stored XSS

Medium 6.4

In plain English

A medium-severity cross-site scripting in AccessPress Social Icons from Accesspressthemes. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).

Severity (CVSS 3.1)6.4Medium

Exploit odds (30 days)0.2%top 84.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

AccessPress Social Icons 1.8.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by entering JavaScript payloads into the 'icon title' field. Attackers can store XSS payloads like image tags with onerror event handlers that execute when the plugin page is viewed, affecting all users who access the plugin interface.

Affected products (as reported)

Vendor	Product	Versions
Accesspressthemes	AccessPress Social Icons	1.8.2

Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

References

ExploitDB-50515 exploit
Official Product Homepage product
Product Reference product
VulnCheck Advisory: WordPress Plugin AccessPress Social Icons 1.8.2 Stored XSS third-party-advisory