PHP Everywhere vulnerabilities

3 known vulnerabilities in PHP Everywhere from Alexander Fuchs. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  PHP Everywhere: Improper Control of Generation of Code

  CVE-2022-24665Feb 16, 2022Alexander FuchsEPSS 2.62%

  PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via a WordPress gutenberg block by any user able to edit posts.

• 8.8 High severity

  PHP Everywhere: Improper Control of Generation of Code

  CVE-2022-24664Feb 16, 2022Alexander FuchsEPSS 1.66%

  PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress metaboxes, which could be used by any user able to edit posts.

• 8.8 High severity

  PHP Everywhere: Improper Control of Generation of Code

  CVE-2022-24663Feb 16, 2022Alexander FuchsEPSS 2.06%

  PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress shortcodes, which can be used by any authenticated user.