Approved changes feed: RSS · Atom

cpe:2.3:a:accesspressthemes:accesspress_social_icons:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAccesspressthemes (f69d30d4-213e-591e-a578-b005fb42861b)
ProductAccesspress Social Icons (bc06b6a8-25c8-5f6f-9735-402322b88cc7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wp-plugins/accesspress-social-icons purl2cpe 2026-06-01 10:16:33.308998

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-47910 vulnerable 2026-06-08 05:38:07.885716 WordPress Plugin AccessPress Social Icons 1.8.2 Stored XSS
MEDIUM (6.4)
AccessPress Social Icons 1.8.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by entering JavaScript payloads into the 'icon title' field. Attackers can store XSS payloads like image tags with onerror event handlers that execute when the plugin page is viewed, affecting all users who access the plugin interface.
Published: 2026-05-10T12:43:44.569Z
Updated: 2026-05-24T01:37:05.032Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.