CVE-2021-39317: Accesspressthemes access demo importer improper authorization vulnerability

Description

A WordPress plugin and several WordPress themes developed by AccessPress Themes are vulnerable to malicious file uploads via the plugin_offline_installer AJAX action due to a missing capability check in the plugin_offline_installer_callback function found in the /demo-functions.php file or /welcome.php file of the affected products. The complete list of affected products and their versions are below: WordPress Plugin: AccessPress Demo Importer <=1.0.6 WordPress Themes: accesspress-basic <= 3.2.1 accesspress-lite <= 2.92 accesspress-mag <= 2.6.5 accesspress-parallax <= 4.5 accesspress-root <= 2.5 accesspress-store <= 2.4.9 agency-lite <= 1.1.6 arrival <= 1.4.2 bingle <= 1.0.4 bloger <= 1.2.6 brovy <= 1.3 construction-lite <= 1.2.5 doko <= 1.0.27 edict-lite <= 1.1.4 eightlaw-lite <= 2.1.5 eightmedi-lite <= 2.1.8 eight-sec <= 1.1.4 eightstore-lite <= 1.2.5 enlighten <= 1.3.5 fotography <= 2.4.0 opstore <= 1.4.3 parallaxsome <= 1.3.6 punte <= 1.1.2 revolve <= 1.3.1 ripple <= 1.2.0 sakala <= 1.0.4 scrollme <= 2.1.0 storevilla <= 1.4.1 swing-lite <= 1.1.9 the100 <= 1.1.2 the-launcher <= 1.3.2 the-monday <= 1.4.1 ultra-seven <= 1.2.8 uncode-lite <= 1.3.3 vmag <= 1.2.7 vmagazine-lite <= 1.3.5 vmagazine-news <= 1.0.5 wpparallax <= 2.0.6 wp-store <= 1.1.9 zigcy-baby <= 1.0.6 zigcy-cosmetics <= 1.0.5 zigcy-lite <= 2.0.9

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

43 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Access Demo Importer Accesspressthemes Accesspress Basic Accesspressthemes Accesspress Lite Accesspressthemes Accesspress Mag Accesspressthemes Accesspress Parallax Accesspressthemes Accesspress Root Accesspressthemes Accesspress Store Accesspressthemes Agency Lite Accesspressthemes Arrival Accesspressthemes Bingle Accesspressthemes Bloger Accesspressthemes Brovy Accesspressthemes Construction Lite Accesspressthemes Doko Accesspressthemes Edict Lite Accesspressthemes Eight Sec Accesspressthemes Eightlaw Lite Accesspressthemes Eightmedi Lite Accesspressthemes Eightstore Lite Accesspressthemes Enlighten Accesspressthemes Fotography Accesspressthemes Opstore Accesspressthemes Parallaxsome Accesspressthemes Punte Accesspressthemes Revolve Accesspressthemes Ripple Accesspressthemes Sakala Accesspressthemes Scrollme Accesspressthemes Storevilla Accesspressthemes Swing Lite Accesspressthemes The Launcher Accesspressthemes The Monday Accesspressthemes The100 Accesspressthemes Ultra Seven Accesspressthemes Uncode Lite Accesspressthemes Vmag Accesspressthemes Vmagazine Lite Accesspressthemes Vmagazine News Accesspressthemes Wp Store Accesspressthemes Wpparallax Accesspressthemes Zigcy Baby Accesspressthemes Zigcy Cosmetics Accesspressthemes Zigcy Lite Accesspressthemes

References

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.