PHP Everywhere Project PHP Everywhere
4 CVEs affecting PHP Everywhere Project PHP Everywhere. Latest disclosed: 2022-02-16. Critical: 3, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-24665 | Critical | 9.9 | 2022-02-16 | PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via a WordPress gutenberg block by any user able to edit posts. |
CVE-2022-24664 | Critical | 9.9 | 2022-02-16 | PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress metaboxes, which could be used by any user able to edi… |
CVE-2022-24663 | Critical | 9.9 | 2022-02-16 | PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress shortcodes, which can be used by any authenticated use… |
CVE-2021-23227 | Medium | 5.4 | 2022-01-13 | Cross-Site Request Forgery (CSRF) vulnerability in Alexander Fuchs PHP Everywhere plugin <= 2.0.2 versions. |