PatchTheCVEaccesspressthemes vulnerabilities
Recent CVEs affecting accesspressthemes products. 5 tracked.
accesspressthemes has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2023-11-22. Highest priority: CVE-2023-28661 (score 51/100).
- CVE-2023-28661 HIGH 8.8 DOWNGRADE The WP Popup Banners WordPress Plugin, version <= 1.2.5, is affected by an authenticated SQL injection vulnera
- CVE-2023-26532 MEDIUM 5.4 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in AccessPress Themes Social Auto Poster plugin <= 2.1.4 versi
- CVE-2023-26518 MEDIUM 5.4 UPGRADE Cross-Site Request Forgery (CSRF) vulnerability in AccessPress Themes WP TFeed plugin <= 1.6.9 versions.
- CVE-2023-0175 MEDIUM 5.4 DOWNGRADE The Responsive Clients Logo Gallery Plugin for WordPress plugin through 1.1.9 does not validate and escape som
- CVE-2022-4946 MEDIUM 5.4 UPGRADE The Frontend Post WordPress Plugin WordPress plugin through 2.8.4 does not validate an attribute of one of its
FAQ
How do I fix accesspressthemes vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is accesspressthemes being exploited right now?
None of the tracked accesspressthemes CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which accesspressthemes CVE should I patch first?
CVE-2023-28661 currently ranks highest (51/100): The WP Popup Banners WordPress Plugin, version <= 1.2.5, is affected by an authenticated SQL injection vulnera.