CVE-2021-24143

8.8 highEPSS 1.3%

High (8.8) in accesspressthemes accesspress social icons. EPSS 1.3% chance of exploitation in the next 30 days.

Unvalidated input in the AccessPress Social Icons plugin, versions before 1.8.1, did not sanitise its widget attribute, allowing accounts with post permission, such as author, to perform SQL injections.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2021-03-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

accesspressthemes:accesspress_social_icons

References

https://wpscan.com/vulnerability/02c5e10c-1ac7-447e-8ae5-b6d251be750b
https://wpscan.com/vulnerability/02c5e10c-1ac7-447e-8ae5-b6d251be750b

Check your stack JSON