AccessPress Themes Vulnerabilities and Affected Products
Vulnerabilities associated with Access Demo Importer (WordPress plugin).
Products
Clear product- Access Demo Importer (WordPress plugin)2 vulnerabilities
- Bingle2 vulnerabilities
- Bloger2 vulnerabilities
- Doko2 vulnerabilities
- Enlighten2 vulnerabilities
- FotoGraphy2 vulnerabilities
- ParallaxSome2 vulnerabilities
- Punte2 vulnerabilities
- Revolve2 vulnerabilities
- Ripple2 vulnerabilities
- ScrollMe2 vulnerabilities
- Social Auto Poster2 vulnerabilities
- StoreVilla2 vulnerabilities
- VMag2 vulnerabilities
- WP TFeed2 vulnerabilities
- Access Demo Importer1 vulnerability
- accessbuddy1 vulnerability
- Accesspress Basic1 vulnerability
- AccessPress Custom CSS1 vulnerability
- AccessPress Custom Post Type1 vulnerability
- AccessPress iFeeds1 vulnerability
- Accesspress Lite1 vulnerability
- Accesspress Mag1 vulnerability
- AccessPress Parallax1 vulnerability
- AccessPress Root1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2022-23975MEDIUM | WordPress Access Demo Importer plugin <= 1.0.7 - Cross-Site Request Forgery (CSRF) vulnerability leading to Arbitrary Plugin ActivationCross-Site Request Forgery (CSRF) in Access Demo Importer <= 1.0.7 on WordPress allows an attacker to activate any installed plugin. CWE-352Apr 18, 2022 | CVSS6.5v3.1 | EPSS0.474% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-23976HIGH | WordPress Access Demo Importer plugin <= 1.0.7 - Cross-Site Request Forgery (CSRF) vulnerability leading to Data Reset (Posts / Pages / Media)Cross-Site Request Forgery (CSRF) in Access Demo Importer <= 1.0.7 on WordPress allows an attacker to reset all data (posts / pages / media). CWE-352Apr 18, 2022 | CVSS8.1v3.1 | EPSS0.462% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |