CVE-2021-24143: Accesspressthemes Accesspress Social Icons

High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Unvalidated input in the AccessPress Social Icons plugin, versions before 1.8.1, did not sanitise its widget attribute, allowing accounts with post permission, such as author, to perform SQL injections.

Affected products

• Accesspressthemes Accesspress Social Icons: before 1.8.1 (fixed in 1.8.1)

Published 2021-03-18. Last modified 2026-06-17.