Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin PHP Everywhere Multiple Remote Code Execution Vulnerabilities - CVE-2022-24664 - Vulnerability Database
WP Plugin Php Everywhere

WordPress Plugin PHP Everywhere Multiple Remote Code Execution Vulnerabilities - CVE-2022-24664

Critical
Reference: CVE-2022-24664
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2022-24664
Title: WordPress Plugin PHP Everywhere Multiple Remote Code Execution Vulnerabilities
Overview:

WordPress Plugin PHP Everywhere is prone to multiple remote code execution vulnerabilities because it fails to sufficiently sanitize user-supplied input. Successful exploitation may allow attackers to execute arbitrary commands with the privileges of the user running the application to compromise the application or the underlying database to access or modify data or to compromise a vulnerable system. WordPress Plugin PHP Everywhere version 2.0.3 is vulnerable prior versions may also be affected.