Skip to content
OpenAdvisories

Product · SKSDEV

Allow PHP Execute

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2024-13890

    Allow PHP Execute <= 1.0 - Authenticated (Editor+) PHP Code Injection

    The Allow PHP Execute plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 1.0. This is due to allowing PHP code to be entered by all users for whom unfiltered HTML is allowed. This makes it possible for authenticated…

    SKSDEV Allow PHP Execute Web / CMS