CVE-2022-24663 — Remote Code Execution by Subscriber+ users via WordPress shortcode

CVE-2022-24663

Remote Code Execution by Subscriber+ users via WordPress shortcode PUBLISHED

Description (CNA)

PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress shortcodes, which can be used by any authenticated user.

Affected (CNA)

Vendor / product	Versions
Alexander Fuchs / PHP Everywhere	affected 2.0.3 through 2.0.3

CWE

CWE-94

References

https://www.wordfence.com/blog/2022/02/critical-vulnerabilities-in-php-everywhere-allow-remote-code-execution/

ADP enrichment

CVE

No English description supplied.

https://www.wordfence.com/blog/2022/02/critical-vulnerabilities-in-php-everywhere-allow-remote-code-execution/

CISA-ADP

No English description supplied.

No references supplied.