CVE-2022-24664 — Remote Code Execution by by Contributor+ users via WordPress metabox

CVE-2022-24664

Remote Code Execution by by Contributor+ users via WordPress metabox PUBLISHED

Description (CNA)

PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress metaboxes, which could be used by any user able to edit posts.

Affected (CNA)

Vendor / product	Versions
Alexander Fuchs / PHP Everywhere	affected 2.0.3 through 2.0.3

CWE

CWE-94

References

https://www.wordfence.com/blog/2022/02/critical-vulnerabilities-in-php-everywhere-allow-remote-code-execution/

ADP enrichment

CVE

No English description supplied.

https://www.wordfence.com/blog/2022/02/critical-vulnerabilities-in-php-everywhere-allow-remote-code-execution/

CISA-ADP

No English description supplied.

No references supplied.