Approved changes feed: RSS · Atom

cpe:2.3:a:accesspressthemes:accesspress_social_icons:1.8.2:*:*:*:*:wordpress:*:*

part: a version: 1.8.2 update: *

VendorAccesspressthemes (f69d30d4-213e-591e-a578-b005fb42861b)
ProductAccesspress Social Icons (bc06b6a8-25c8-5f6f-9735-402322b88cc7)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/wp-plugins/accesspress-social-icons purl2cpe 2026-06-01 10:16:33.309097

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-47910 vulnerable 2026-06-03 14:45:47.347530 WordPress Plugin AccessPress Social Icons 1.8.2 Stored XSS
MEDIUM (6.4)
AccessPress Social Icons 1.8.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by entering JavaScript payloads into the 'icon title' field. Attackers can store XSS payloads like image tags with onerror event handlers that execute when the plugin page is viewed, affecting all users who access the plugin interface.
Published: 2026-05-10T12:43:44.569Z
Updated: 2026-05-24T01:37:05.032Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24867 vulnerable 2026-06-03 14:44:03.805233 Backdoored Plugins & Themes from AccessPress Themes
Numerous Plugins and Themes from the AccessPress Themes (aka Access Keys) vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to avoid any confusion
Published: 2022-02-21T10:45:39.000Z
Updated: 2024-08-03T19:49:13.412Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.