NetSight
critical9.9

CVE-2022-24665

PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via a WordPress gutenberg block by any user able to edit posts.

Impact

PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via a WordPress gutenberg block by any user able to edit posts.

Affected products

VendorProductAffected versions
Php Everywhere ProjectPhp Everywhere
through 2.0.3

Weakness classification

References