Skip to content
OpenAdvisories

Product · Alexander Fuchs

PHP Everywhere

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.9
    CVE-2022-24665

    Remote Code Execution by by Contributor+ users via WordPress gutenberg block

    PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via a WordPress gutenberg block by any user able to edit posts.

    Alexander Fuchs PHP Everywhere
  • Critical 9.9
    CVE-2022-24663

    Remote Code Execution by Subscriber+ users via WordPress shortcode

    PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress shortcodes, which can be used by any authenticated user.

    Alexander Fuchs PHP Everywhere
  • Critical 9.9
    CVE-2022-24664

    Remote Code Execution by by Contributor+ users via WordPress metabox

    PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress metaboxes, which could be used by any user able to edit posts.

    Alexander Fuchs PHP Everywhere