Skip to content
Founder-led WordPress incident response and care Request an assessment
3zerodigital Request a Website Assessment

Theme security history

Zigcy Cosmetics Vulnerability History & Security Timeline

The Wordfence Intelligence dataset currently contains 3 vulnerability records associated with Zigcy Cosmetics, published between 2021 and 2022.

Dataset last synchronized: 2026-08-03 00:31:25 UTC

At a glance

Security Snapshot

3Total records
0Critical
3High
0Medium
0Low
0Informational
3Patched records
0Currently marked unpatched
2021-10-06First disclosure
2022-01-11Latest disclosure
2 of 3CVE coverage

Year-by-Year Timeline

YearRecordsRelative volume
202111 records
202222 records

Severity Breakdown

SeverityRecordsShare
High3100%

Vulnerability-Type Breakdown

Arbitrary File Upload

1 record33.3%

First: 2021. Latest: 2021.

CSRF

1 record33.3%

First: 2022. Latest: 2022.

Missing Authorization

1 record33.3%

First: 2022. Latest: 2022.

Patch Status

Patched
3
Currently marked unpatched
0
Unknown status
0

Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.

Latest Known Patched Versions

  • 1.0.6

Affected-Version History

Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.

Affected rangeVulnerabilityPublishedPatched versionSeverity
*-1.0.5AccessPress Themes and Plugin <= Various Versions - Missing Authorization to Arbitrary Plugin Deactivation/ActivationJanuary 11, 20221.0.6High
*-1.0.5AccessPress Themes and Plugin <= Various Versions - Cross-Site Request ForgeryJanuary 11, 20221.0.6High
*-1.0.5AccessPress Themes and Plugin <= Various Versions - Authenticated (Subscriber+) Arbitrary File UploadOctober 6, 20211.0.6High

Selected source records

Latest Records

High

AccessPress Themes and Plugin <= Various Versions - Cross-Site Request Forgery

Published: January 11, 2022

Affected versions
*-1.4.1
Patched versions
Not supplied
Affected versions
*-1.0.27
Patched versions
1.1.0
Affected versions
*-1.1.4
Patched versions
Not supplied
Affected versions
*-1.3.1
Patched versions
Not supplied
Affected versions
*-1.0.4
Patched versions
1.0.5
Affected versions
*-1.3.6
Patched versions
1.3.7
Affected versions
*-1.3.3
Patched versions
Not supplied
Affected versions
*-2.1.5
Patched versions
2.1.6
Affected versions
*-2.92
Patched versions
2.93
Affected versions
*-2.4.0
Patched versions
2.4.1
Affected versions
*-1.4.2
Patched versions
1.4.3
Affected versions
*-1.2.7
Patched versions
1.2.8
Affected versions
*-2.6.5
Patched versions
2.6.6
Affected versions
*-1.0.4
Patched versions
1.0.5
Affected versions
*-1.3.5
Patched versions
1.3.6
Affected versions
*-1.1.6
Patched versions
1.1.7
Affected versions
*-1.3.2
Patched versions
1.3.3
Affected versions
*-2.0.9
Patched versions
2.1.0
Affected versions
*-1.3
Patched versions
Not supplied
Affected versions
*-2.1.8
Patched versions
2.1.9
Affected versions
*-2.0.6
Patched versions
Not supplied
Affected versions
*-1.3.5
Patched versions
1.3.6
Affected versions
*-1.2.5
Patched versions
1.2.6
Affected versions
*-2.4.9
Patched versions
2.5.0
Affected versions
*-1.1.9
Patched versions
1.2.0
Affected versions
*-1.2.1
Patched versions
Not supplied
Affected versions
*-1.0.6
Patched versions
1.0.7
Affected versions
*-1.1.2
Patched versions
1.1.3
Affected versions
*-3.2.1
Patched versions
3.2.2
Affected versions
*-1.0.6
Patched versions
1.0.7
Affected versions
*-2.1.0
Patched versions
Not supplied
Affected versions
*-1.0.5
Patched versions
1.0.6
Affected versions
*-1.2.5
Patched versions
1.2.6
Affected versions
*-1.0.5
Patched versions
1.0.6
Affected versions
*-4.5
Patched versions
4.6
Affected versions
*-2.5
Patched versions
2.6.0
Affected versions
*-1.9.1
Patched versions
Not supplied
Affected versions
*-1.4.1
Patched versions
1.4.2
Affected versions
*-1.2.8
Patched versions
Not supplied
Affected versions
*-1.1.2
Patched versions
Not supplied
Affected versions
*-1.1.4
Patched versions
Not supplied
Affected versions
*-1.1.9
Patched versions
1.2.0
Affected versions
*-1.4.3
Patched versions
1.4.4
Affected versions
*-1.2.6
Patched versions
1.2.7
Original Wordfence record
HighCVE-2022-23975

AccessPress Themes and Plugin <= Various Versions - Missing Authorization to Arbitrary Plugin Deactivation/Activation

Published: January 11, 2022

Affected versions
*-1.4.1
Patched versions
Not supplied
Affected versions
*-1.0.27
Patched versions
1.1.0
Affected versions
*-1.1.4
Patched versions
Not supplied
Affected versions
*-1.3.1
Patched versions
Not supplied
Affected versions
*-1.0.4
Patched versions
1.0.5
Affected versions
*-1.3.6
Patched versions
1.3.7
Affected versions
*-1.3.3
Patched versions
Not supplied
Affected versions
*-2.1.5
Patched versions
2.1.6
Affected versions
*-2.92
Patched versions
2.93
Affected versions
*-2.4.0
Patched versions
2.4.1
Affected versions
*-1.4.2
Patched versions
1.4.3
Affected versions
*-1.2.7
Patched versions
1.2.8
Affected versions
*-2.6.5
Patched versions
2.6.6
Affected versions
*-1.0.4
Patched versions
1.0.5
Affected versions
*-1.3.5
Patched versions
1.3.6
Affected versions
*-1.1.6
Patched versions
1.1.7
Affected versions
*-1.3.2
Patched versions
1.3.3
Affected versions
*-2.0.9
Patched versions
2.1.0
Affected versions
*-1.3
Patched versions
Not supplied
Affected versions
*-2.1.8
Patched versions
2.1.9
Affected versions
*-2.0.6
Patched versions
Not supplied
Affected versions
*-1.3.5
Patched versions
1.3.6
Affected versions
*-1.2.5
Patched versions
1.2.6
Affected versions
*-2.4.9
Patched versions
2.5.0
Affected versions
*-1.1.9
Patched versions
1.2.0
Affected versions
*-1.2.1
Patched versions
Not supplied
Affected versions
*-1.0.6
Patched versions
1.0.7
Affected versions
*-1.1.2
Patched versions
1.1.3
Affected versions
*-3.2.1
Patched versions
3.2.2
Affected versions
*-1.0.6
Patched versions
1.0.7
Affected versions
*-2.1.0
Patched versions
Not supplied
Affected versions
*-1.0.5
Patched versions
1.0.6
Affected versions
*-1.2.5
Patched versions
1.2.6
Affected versions
*-1.0.5
Patched versions
1.0.6
Affected versions
*-4.5
Patched versions
4.6
Affected versions
*-2.5
Patched versions
2.6.0
Affected versions
*-1.4.1
Patched versions
1.4.2
Affected versions
*-1.2.8
Patched versions
Not supplied
Affected versions
*-1.1.2
Patched versions
Not supplied
Affected versions
*-1.1.4
Patched versions
Not supplied
Affected versions
*-1.1.9
Patched versions
1.2.0
Affected versions
*-1.4.3
Patched versions
1.4.4
Affected versions
*-1.2.6
Patched versions
1.2.7
Original Wordfence record
HighCVE-2021-39317

AccessPress Themes and Plugin <= Various Versions - Authenticated (Subscriber+) Arbitrary File Upload

Published: October 6, 2021

Affected versions
*-1.4.1
Patched versions
Not supplied
Affected versions
*-1.0.27
Patched versions
1.1.0
Affected versions
*-1.1.4
Patched versions
Not supplied
Affected versions
*-1.3.1
Patched versions
Not supplied
Affected versions
*-1.0.4
Patched versions
1.0.5
Affected versions
*-1.3.6
Patched versions
1.3.7
Affected versions
*-1.3.3
Patched versions
Not supplied
Affected versions
*-2.1.5
Patched versions
2.1.6
Affected versions
*-2.92
Patched versions
2.93
Affected versions
*-2.4.0
Patched versions
2.4.1
Affected versions
*-1.4.2
Patched versions
1.4.3
Affected versions
*-1.2.7
Patched versions
1.2.8
Affected versions
*-2.6.5
Patched versions
2.6.6
Affected versions
*-1.0.4
Patched versions
1.0.5
Affected versions
*-1.3.5
Patched versions
1.3.6
Affected versions
*-1.1.6
Patched versions
1.1.7
Affected versions
*-1.3.2
Patched versions
1.3.3
Affected versions
*-2.0.9
Patched versions
2.1.0
Affected versions
*-1.3
Patched versions
Not supplied
Affected versions
*-2.1.8
Patched versions
2.1.9
Affected versions
*-2.0.6
Patched versions
Not supplied
Affected versions
*-1.3.5
Patched versions
1.3.6
Affected versions
*-1.2.5
Patched versions
1.2.6
Affected versions
*-2.4.9
Patched versions
2.5.0
Affected versions
*-1.1.9
Patched versions
1.2.0
Affected versions
*-1.2.1
Patched versions
Not supplied
Affected versions
*-1.0.6
Patched versions
1.0.7
Affected versions
*-1.1.2
Patched versions
1.1.3
Affected versions
*-3.2.1
Patched versions
3.2.2
Affected versions
*-1.0.6
Patched versions
1.0.7
Affected versions
*-2.1.0
Patched versions
Not supplied
Affected versions
*-1.0.5
Patched versions
1.0.6
Affected versions
*-1.2.5
Patched versions
1.2.6
Affected versions
*-1.0.5
Patched versions
1.0.6
Affected versions
*-4.5
Patched versions
4.6
Affected versions
*-2.5
Patched versions
2.6.0
Affected versions
*-1.9.1
Patched versions
Not supplied
Affected versions
*-1.4.1
Patched versions
1.4.2
Affected versions
*-1.2.8
Patched versions
Not supplied
Affected versions
*-1.1.2
Patched versions
Not supplied
Affected versions
*-1.1.4
Patched versions
Not supplied
Affected versions
*-1.1.9
Patched versions
1.2.0
Affected versions
*-1.4.3
Patched versions
1.4.4
Affected versions
*-1.2.6
Patched versions
1.2.7
Original Wordfence record

Highest-Severity Records

HighCVE-2021-39317

AccessPress Themes and Plugin <= Various Versions - Authenticated (Subscriber+) Arbitrary File Upload

Published: October 6, 2021

Affected versions
*-1.4.1
Patched versions
Not supplied
Affected versions
*-1.0.27
Patched versions
1.1.0
Affected versions
*-1.1.4
Patched versions
Not supplied
Affected versions
*-1.3.1
Patched versions
Not supplied
Affected versions
*-1.0.4
Patched versions
1.0.5
Affected versions
*-1.3.6
Patched versions
1.3.7
Affected versions
*-1.3.3
Patched versions
Not supplied
Affected versions
*-2.1.5
Patched versions
2.1.6
Affected versions
*-2.92
Patched versions
2.93
Affected versions
*-2.4.0
Patched versions
2.4.1
Affected versions
*-1.4.2
Patched versions
1.4.3
Affected versions
*-1.2.7
Patched versions
1.2.8
Affected versions
*-2.6.5
Patched versions
2.6.6
Affected versions
*-1.0.4
Patched versions
1.0.5
Affected versions
*-1.3.5
Patched versions
1.3.6
Affected versions
*-1.1.6
Patched versions
1.1.7
Affected versions
*-1.3.2
Patched versions
1.3.3
Affected versions
*-2.0.9
Patched versions
2.1.0
Affected versions
*-1.3
Patched versions
Not supplied
Affected versions
*-2.1.8
Patched versions
2.1.9
Affected versions
*-2.0.6
Patched versions
Not supplied
Affected versions
*-1.3.5
Patched versions
1.3.6
Affected versions
*-1.2.5
Patched versions
1.2.6
Affected versions
*-2.4.9
Patched versions
2.5.0
Affected versions
*-1.1.9
Patched versions
1.2.0
Affected versions
*-1.2.1
Patched versions
Not supplied
Affected versions
*-1.0.6
Patched versions
1.0.7
Affected versions
*-1.1.2
Patched versions
1.1.3
Affected versions
*-3.2.1
Patched versions
3.2.2
Affected versions
*-1.0.6
Patched versions
1.0.7
Affected versions
*-2.1.0
Patched versions
Not supplied
Affected versions
*-1.0.5
Patched versions
1.0.6
Affected versions
*-1.2.5
Patched versions
1.2.6
Affected versions
*-1.0.5
Patched versions
1.0.6
Affected versions
*-4.5
Patched versions
4.6
Affected versions
*-2.5
Patched versions
2.6.0
Affected versions
*-1.9.1
Patched versions
Not supplied
Affected versions
*-1.4.1
Patched versions
1.4.2
Affected versions
*-1.2.8
Patched versions
Not supplied
Affected versions
*-1.1.2
Patched versions
Not supplied
Affected versions
*-1.1.4
Patched versions
Not supplied
Affected versions
*-1.1.9
Patched versions
1.2.0
Affected versions
*-1.4.3
Patched versions
1.4.4
Affected versions
*-1.2.6
Patched versions
1.2.7
Original Wordfence record
High

AccessPress Themes and Plugin <= Various Versions - Cross-Site Request Forgery

Published: January 11, 2022

Affected versions
*-1.4.1
Patched versions
Not supplied
Affected versions
*-1.0.27
Patched versions
1.1.0
Affected versions
*-1.1.4
Patched versions
Not supplied
Affected versions
*-1.3.1
Patched versions
Not supplied
Affected versions
*-1.0.4
Patched versions
1.0.5
Affected versions
*-1.3.6
Patched versions
1.3.7
Affected versions
*-1.3.3
Patched versions
Not supplied
Affected versions
*-2.1.5
Patched versions
2.1.6
Affected versions
*-2.92
Patched versions
2.93
Affected versions
*-2.4.0
Patched versions
2.4.1
Affected versions
*-1.4.2
Patched versions
1.4.3
Affected versions
*-1.2.7
Patched versions
1.2.8
Affected versions
*-2.6.5
Patched versions
2.6.6
Affected versions
*-1.0.4
Patched versions
1.0.5
Affected versions
*-1.3.5
Patched versions
1.3.6
Affected versions
*-1.1.6
Patched versions
1.1.7
Affected versions
*-1.3.2
Patched versions
1.3.3
Affected versions
*-2.0.9
Patched versions
2.1.0
Affected versions
*-1.3
Patched versions
Not supplied
Affected versions
*-2.1.8
Patched versions
2.1.9
Affected versions
*-2.0.6
Patched versions
Not supplied
Affected versions
*-1.3.5
Patched versions
1.3.6
Affected versions
*-1.2.5
Patched versions
1.2.6
Affected versions
*-2.4.9
Patched versions
2.5.0
Affected versions
*-1.1.9
Patched versions
1.2.0
Affected versions
*-1.2.1
Patched versions
Not supplied
Affected versions
*-1.0.6
Patched versions
1.0.7
Affected versions
*-1.1.2
Patched versions
1.1.3
Affected versions
*-3.2.1
Patched versions
3.2.2
Affected versions
*-1.0.6
Patched versions
1.0.7
Affected versions
*-2.1.0
Patched versions
Not supplied
Affected versions
*-1.0.5
Patched versions
1.0.6
Affected versions
*-1.2.5
Patched versions
1.2.6
Affected versions
*-1.0.5
Patched versions
1.0.6
Affected versions
*-4.5
Patched versions
4.6
Affected versions
*-2.5
Patched versions
2.6.0
Affected versions
*-1.9.1
Patched versions
Not supplied
Affected versions
*-1.4.1
Patched versions
1.4.2
Affected versions
*-1.2.8
Patched versions
Not supplied
Affected versions
*-1.1.2
Patched versions
Not supplied
Affected versions
*-1.1.4
Patched versions
Not supplied
Affected versions
*-1.1.9
Patched versions
1.2.0
Affected versions
*-1.4.3
Patched versions
1.4.4
Affected versions
*-1.2.6
Patched versions
1.2.7
Original Wordfence record
HighCVE-2022-23975

AccessPress Themes and Plugin <= Various Versions - Missing Authorization to Arbitrary Plugin Deactivation/Activation

Published: January 11, 2022

Affected versions
*-1.4.1
Patched versions
Not supplied
Affected versions
*-1.0.27
Patched versions
1.1.0
Affected versions
*-1.1.4
Patched versions
Not supplied
Affected versions
*-1.3.1
Patched versions
Not supplied
Affected versions
*-1.0.4
Patched versions
1.0.5
Affected versions
*-1.3.6
Patched versions
1.3.7
Affected versions
*-1.3.3
Patched versions
Not supplied
Affected versions
*-2.1.5
Patched versions
2.1.6
Affected versions
*-2.92
Patched versions
2.93
Affected versions
*-2.4.0
Patched versions
2.4.1
Affected versions
*-1.4.2
Patched versions
1.4.3
Affected versions
*-1.2.7
Patched versions
1.2.8
Affected versions
*-2.6.5
Patched versions
2.6.6
Affected versions
*-1.0.4
Patched versions
1.0.5
Affected versions
*-1.3.5
Patched versions
1.3.6
Affected versions
*-1.1.6
Patched versions
1.1.7
Affected versions
*-1.3.2
Patched versions
1.3.3
Affected versions
*-2.0.9
Patched versions
2.1.0
Affected versions
*-1.3
Patched versions
Not supplied
Affected versions
*-2.1.8
Patched versions
2.1.9
Affected versions
*-2.0.6
Patched versions
Not supplied
Affected versions
*-1.3.5
Patched versions
1.3.6
Affected versions
*-1.2.5
Patched versions
1.2.6
Affected versions
*-2.4.9
Patched versions
2.5.0
Affected versions
*-1.1.9
Patched versions
1.2.0
Affected versions
*-1.2.1
Patched versions
Not supplied
Affected versions
*-1.0.6
Patched versions
1.0.7
Affected versions
*-1.1.2
Patched versions
1.1.3
Affected versions
*-3.2.1
Patched versions
3.2.2
Affected versions
*-1.0.6
Patched versions
1.0.7
Affected versions
*-2.1.0
Patched versions
Not supplied
Affected versions
*-1.0.5
Patched versions
1.0.6
Affected versions
*-1.2.5
Patched versions
1.2.6
Affected versions
*-1.0.5
Patched versions
1.0.6
Affected versions
*-4.5
Patched versions
4.6
Affected versions
*-2.5
Patched versions
2.6.0
Affected versions
*-1.4.1
Patched versions
1.4.2
Affected versions
*-1.2.8
Patched versions
Not supplied
Affected versions
*-1.1.2
Patched versions
Not supplied
Affected versions
*-1.1.4
Patched versions
Not supplied
Affected versions
*-1.1.9
Patched versions
1.2.0
Affected versions
*-1.4.3
Patched versions
1.4.4
Affected versions
*-1.2.6
Patched versions
1.2.7
Original Wordfence record

View all associated vulnerabilities

Need help reviewing an exposed WordPress website?

Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.

Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.

Data Source, Attribution and Methodology

This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.

Return to the Security History Directory