Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2021-23227

WordPress PHP Everywhere Plugin <= 2.0.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery (CSRF) vulnerability in Alexander Fuchs PHP Everywhere plugin <= 2.0.2 versions.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Php Everywhere Project
Products
Php Everywhere
CVE-2022-24664

Remote Code Execution by by Contributor+ users via WordPress metabox

PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress metaboxes, which could be used by any user able to edit posts.

CVSS 3.1 · 9.9 Critical EPSS 1.7% KEV · Not listed
Vendors
Php Everywhere Project
Products
Php Everywhere
CVE-2022-24663

Remote Code Execution by Subscriber+ users via WordPress shortcode

PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress shortcodes, which can be used by any authenticated user.

CVSS 3.1 · 9.9 Critical EPSS 2.1% KEV · Not listed
Vendors
Php Everywhere Project
Products
Php Everywhere
CVE-2022-24665

Remote Code Execution by by Contributor+ users via WordPress gutenberg block

PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via a WordPress gutenberg block by any user able to edit posts.

CVSS 3.1 · 9.9 Critical EPSS 2.6% KEV · Not listed
Vendors
Php Everywhere Project
Products
Php Everywhere