Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Alexander Fuchs Component: Php Everywhere Clear all filters
TI-2022-08481 CVE-2022-24663 · GHSA-qjvj-j3f4-jvjr

Remote Code Execution by Subscriber+ users via WordPress shortcode

Priority MEDIUM 47

PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress shortcodes, which can be used by any authenticated user.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.02064 Published 2022-02-16 No fix listed CWE-94
TI-2022-08482 CVE-2022-24664 · GHSA-32fp-mqg5-24wv

Remote Code Execution by by Contributor+ users via WordPress metabox

Priority MEDIUM 46

PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress metaboxes, which could be used by any user able to edit posts.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01664 Published 2022-02-16 No fix listed CWE-94