CVE-2021-24867Known exploitationPublic exploitNetwork attack vector

Remote code execution via cookie-triggered webshell

Published Feb 21, 2022 · Updated Aug 3, 2024

Supply-chain compromise in AccessPress Themes extensions allows remote attackers to execute code on affected WordPress sites. An injected inital.php dropper modifies wp-includes/vars.php with wp_is_mobile_fix(), which reconstructs and executes a payload from eight request cookies. Exposure requires installation from the compromised vendor website; equal-version WordPress.org packages are clean, and successful triggering grants full site access.

CVSS severity9.8

Critical

EPSS probability18.88%

Next 30 days · Sep 16, 2026

Known exploitationReported

Based on sourced intelligence

Hinoki checkNot available

Coverage for this vulnerability

See if you're affected

Explore vulnerability checks for your environment with Hinoki.

Book a demo

Summary

What happened

The record

CVE: CVE-2021-24867
Published: Feb 21, 2022
Updated: Aug 3, 2024

Vendor: AccessPress Themes
Product: Apex Notification Bar Lite
Classifications: CWE-912, T1195.002, T1505.003

Attack vector: network
Privileges: unauthenticated

Timeline

How it unfolded

Sep 22, 2021Exploitation reportedCompromised AccessPress website distributed backdoored extensions
Feb 21, 2022CVE publishedPublication date reported by the CVE source.
Aug 3, 2024Record updatedLatest update available in the CVE record.

Exploitability

Present is not the same as exploitable

Compare your product and version with the public record. A matching version still requires validation against your environment.

Is a vulnerable build present?

Compare these published version ranges with your installed build and any vendor patches.

Affected versionversion=2.0.4 <2.0.4*
Affected versionversion=2.0.5 <2.0.5

What conditions does exploitation require?

Attack vectornetwork

Required privilegesunauthenticated

What is affected?

AccessPress Themes · Apex Notification Bar Liteversion=2.0.4 <2.0.4*; version=2.0.5 <2.0.5

AccessPress Themes · AccessPress Custom Post Typeversion=1.0.8 <1.0.8*; version=1.0.9 <1.0.9

AccessPress Themes · AccessPress Rayversion=1.19.5

AccessPress Themes · AccessPress Basicversion=3.2.1

AccessPress Themes · Product Slider For WooCommerce Liteversion=1.1.5 <1.1.5*; version=1.1.6 <1.1.6

AccessPress Themes · Everest FAQ Manager Liteversion=1.0.8 <1.0.8*; version=1.0.9 <1.0.9

AccessPress Themes · AccessPress Social Iconsversion=1.8.2 <1.8.2*; version=1.8.3 <1.8.3

AccessPress Themes · Social Auto Posterversion=2.1.3 <2.1.3*; version=2.1.4 <2.1.4

AccessPress Themes · Easy Side Tabversion=1.0.7 <1.0.7*; version=1.0.8 <1.0.8

AccessPress Themes · AccessPress Anonymous Postversion=2.8.0 <2.8.0*; version=2.8.1 <2.8.1

AccessPress Themes · StoreVillaversion=1.4.1

AccessPress Themes · SportsMagversion=1.2.1

AccessPress Themes · WP Blog Manager Liteversion=1.1.1 <1.1.1*; version=1.1.2 <1.1.2

AccessPress Themes · WP Cookie User Infoversion=1.0.7 <1.0.7*; version=1.0.8 <1.0.8

AccessPress Themes · AccessPress Stapleversion=1.9.1

AccessPress Themes · VMagazine Liteversion=1.3.5

AccessPress Themes · Swing Liteversion=1.1.9

AccessPress Themes · Badge Designer Lite For WooCommerceversion=1.1.0 <1.1.0*; version=1.1.1 <1.1.1

AccessPress Themes · AP Pricing Tables Liteversion=1.1.3 <1.1.3* changes=[{"at":"1.1.3","status":"unaffected"}]

AccessPress Themes · AccessPress Rootversion=2.5

AccessPress Themes · Enlightenversion=1.3.5

AccessPress Themes · WP 1 Sliderversion=1.2.9 <1.2.9*; version=1.3.0 <1.3.0

AccessPress Themes · Rippleversion=1.2.0

AccessPress Themes · Agency Liteversion=1.1.6

AccessPress Themes · Comments Disable – AccessPressversion=1.0.7 <1.0.7*; version=1.0.8 <1.0.8

AccessPress Themes · VMagversion=1.2.7

AccessPress Themes · Everest Tab Liteversion=2.0.3 <2.0.3*; version=2.0.4 <2.0.4

AccessPress Themes · Everest Admin Theme Liteversion=1.0.7 <1.0.7*; version=1.0.8 <1.0.8

AccessPress Themes · WP TFeedversion=1.6.7 <1.6.7*; version=1.6.8 <1.6.8

AccessPress Themes · WP Media Manager Liteversion=1.1.2 <1.1.2*; version=1.1.3 <1.1.3

AccessPress Themes · WP Popup Liteversion=1.0.8

AccessPress Themes · WP Floating Menuversion=1.4.4 <1.4.4*; version=1.4.5 <1.4.5

AccessPress Themes · MContact Buttonversion=2.0.7 <2.0.7

AccessPress Themes · WP Product Gallery Liteversion=1.1.1

AccessPress Themes · The Mondayversion=1.4.1

AccessPress Themes · Everest Comment Rating Liteversion=2.0.4 <2.0.4*; version=2.0.5 <2.0.5

AccessPress Themes · AccessPress Storeversion=2.4.9

AccessPress Themes · Everest GPlaces Business Reviewsversion=1.0.9 <1.0.9*; version=2.0.0 <2.0.0

AccessPress Themes · Social Reviewversion=1.0.9 <1.0.9

AccessPress Themes · FashStoreversion=1.2.1

AccessPress Themes · Total Team Liteversion=1.1.1 <1.1.1*; version=1.1.2 <1.1.2

AccessPress Themes · Gaga Corpversion=1.0.8

AccessPress Themes · Unicon Liteversion=1.2.6

AccessPress Themes · FotoGraphyversion=2.4.0

AccessPress Themes · Everest Coming Soon Liteversion=1.1.0 <1.1.0*; version=1.1.1 <1.1.1

AccessPress Themes · Revolveversion=1.3.1

AccessPress Themes · AccessPress Social Counterversion=1.9.1 <1.9.1*; version=1.9.2 <1.9.2

AccessPress Themes · Inline Call To Action Builder Liteversion=1.1.0 <1.1.0*; version=1.1.1 <1.1.1

AccessPress Themes · ScrollMeversion=2.1.0

AccessPress Themes · AP Contact Formversion=1.0.6 <1.0.6*; version=1.0.7 <1.0.7

AccessPress Themes · Zigcy Babyversion=1.0.6

AccessPress Themes · AccessPress iFeedsversion=4.0.3 <4.0.3*; version=4.0.4 <4.0.4

AccessPress Themes · Smart Scroll Posts for WordPressversion=2.0.8 <2.0.8*; version=2.0.9 <2.0.9

AccessPress Themes · WP Menu Icons Liteversion=1.0.9 <1.0.9

AccessPress Themes · Everest Gallery Liteversion=1.0.8 <1.0.8*; version=1.0.9 <1.0.9

AccessPress Themes · Everest Review Liteversion=1.0.7

AccessPress Themes · Vmagazine Newsversion=1.0.5

AccessPress Themes · AccessPress Parallaxversion=4.5

AccessPress Themes · AccessPress Social Login Liteversion=3.4.7 <3.4.7*; version=3.4.8 <3.4.8

AccessPress Themes · Parallax Blogversion=3.1.1574941215

AccessPress Themes · Ultimate Form Builder Liteversion=1.5.0 <1.5.0*; version=1.5.1 <1.5.1

AccessPress Themes · AccessPress Social Shareversion=4.5.5 <4.5.5*; version=4.5.6 <4.5.6

AccessPress Themes · Bingleversion=1.0.4

AccessPress Themes · Uncode Liteversion=1.3.1

AccessPress Themes · AP Mega Menuversion=3.0.5 <3.0.5*; version=3.0.6 <3.0.6

AccessPress Themes · Construction Liteversion=1.2.5

AccessPress Themes · AccessPress Liteversion=2.92

AccessPress Themes · Total GDPR Compliance Liteversion=1.0.4

AccessPress Themes · PI Buttonversion=3.3.3 <3.3.3*; version=3.3.4 <3.3.4

AccessPress Themes · WP Popup Bannersversion=1.2.3 <1.2.3*; version=1.2.4 <1.2.4

AccessPress Themes · Punteversion=1.1.2

AccessPress Themes · Smart Scroll to Top Liteversion=1.0.3 <1.0.3*; version=1.0.4 <1.0.4

AccessPress Themes · ParallaxSomeversion=1.3.6

AccessPress Themes · Everest Counter Liteversion=2.0.7 <2.0.7*; version=2.0.8 <2.0.8

AccessPress Themes · Gaga Liteversion=1.4.2 1.0.8

AccessPress Themes · Dokoversion=1.0.27

AccessPress Themes · Zigcy Liteversion=2.0.9

AccessPress Themes · One Pazeversion=2.2.8

AccessPress Themes · The Launcherversion=1.3.2

AccessPress Themes · Ultimate Author Box Liteversion=1.1.2 <1.1.2*; version=1.1.3 <1.1.3

AccessPress Themes · AccessPress Magversion=2.6.5

AccessPress Themes · Everest Timeline Liteversion=1.1.1 <1.1.1*; version=1.1.2 <1.1.2

AccessPress Themes · AP Custom Testimonialversion=1.4.6 <1.4.6*; version=1.4.7 <1.4.7

AccessPress Themes · Apliteversion=1.0.6

AccessPress Themes · WP Comment Designer Liteversion=2.0.3 <2.0.3*; version=2.0.4 <2.0.4

AccessPress Themes · AccessBuddyversion=1.0.0

AccessPress Themes · Zigcy Cosmeticsversion=1.0.5

AccessPress Themes · Smart Logo Showcase Liteversion=1.1.7 <1.1.7*; version=1.1.8 <1.1.8

AccessPress Themes · Blogerversion=1.2.6

AccessPress Themes · AP Companionversion=1.0.7 <1.0.7

AccessPress Themes · AccessPress Custom CSSversion=2.0.1 <2.0.1*; version=2.0.2 <2.0.2

AccessPress Themes · TAuto Posterversion=1.4.5 <1.4.5*; version=1.4.6 <1.4.6

AccessPress Themes · Form Store to DBversion=1.0.9 <1.0.9*; version=1.1.0 <1.1.0

Published CVSS scores

9.8NIST NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5NIST NVDAV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS describes severity. EPSS estimates exploitation probability.

Attacks

What attackers are doing with it

Daily unique IPs observed by Shadowserver honeypots for known exploited vulnerabilities (KEVs). Missing observations do not establish an absence of attacks.

Daily unique IPsNo honeypot observations are available for this CVE in the selected window.

No observations available

Sep 10, 2026Sep 16, 2026

Latest reporting daySep 16, 2026

Latest daily unique IPsUnavailable

Prior 30-day averageUnavailable

SourceShadowserver honeypots (KEV)

Vectornetwork

Privilegesunauthenticated

Known exploitationReported

Public exploitPublished

Weakness, pattern, technique

CWE-912Hidden Functionality

T1195.002Compromise Software Supply Chain

T1505.003Web Shell

Public exploit references

Published cookie-triggered AccessPress webshellfunctional · demonstrated

Labels summarize the accepted research assessment. They do not indicate a test against your environment.

Reported exploitation

Compromised AccessPress website distributed backdoored extensionsreported exploitation

Technologies

Your stack

See the directory against your own environment.

Your stack

Check the software in your environment

Book a demo to see how Hinoki identifies affected software and validates exploitability in your environment.

Book a demo