CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

64 matches found

Prion•added 2022/02/16 5:15 p.m.•24 views

Code injection

PHP Everywhere = 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress metaboxes, which could be used by any user able to edit posts...

4CVSS8.7AI score0.01664EPSS

SaveExploits2References1Affected Software1

Prion•added 2022/02/16 5:15 p.m.•22 views

Code injection

PHP Everywhere = 2.0.3 included functionality that allowed execution of PHP Code Snippets via a WordPress gutenberg block by any user able to edit posts...

6.5CVSS8.6AI score0.02622EPSS

SaveExploits3References1Affected Software1

Prion•added 2022/02/16 5:15 p.m.•18 views

Code injection

PHP Everywhere = 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress shortcodes, which can be used by any authenticated user...

6.5CVSS8.7AI score0.02064EPSS

SaveExploits2References1Affected Software1

Vulnrichment•added 2022/02/16 4:38 p.m.•11 views

CVE-2022-24663 Remote Code Execution by Subscriber+ users via WordPress shortcode

PHP Everywhere = 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress shortcodes, which can be used by any authenticated user...

9.9CVSS9.6AI score0.02064EPSS

SaveExploits2References1

Vulnrichment•added 2022/02/16 4:38 p.m.•14 views

CVE-2022-24665 Remote Code Execution by by Contributor+ users via WordPress gutenberg block

PHP Everywhere = 2.0.3 included functionality that allowed execution of PHP Code Snippets via a WordPress gutenberg block by any user able to edit posts...

9.9CVSS9.6AI score0.02622EPSS

SaveExploits3References1

Cvelist•added 2022/02/16 4:38 p.m.•48 views

CVE-2022-24663 Remote Code Execution by Subscriber+ users via WordPress shortcode

PHP Everywhere = 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress shortcodes, which can be used by any authenticated user...

9.9CVSS9.8AI score0.02064EPSS

SaveExploits2References1

Cvelist•added 2022/02/16 4:38 p.m.•46 views

CVE-2022-24665 Remote Code Execution by by Contributor+ users via WordPress gutenberg block

PHP Everywhere = 2.0.3 included functionality that allowed execution of PHP Code Snippets via a WordPress gutenberg block by any user able to edit posts...

9.9CVSS9.7AI score0.02622EPSS

SaveExploits3References1

CVE•added 2022/02/16 4:38 p.m.•154 views

CVE-2022-24665

CVE-2022-24665 affects the WordPress PHP Everywhere plugin

9.9CVSS8.7AI score0.02622EPSS

SaveIn wildExploits3References1Affected Software1

Mend•added 2022/02/16 4:38 p.m.•0 views

CVE-2022-24665

PHP Everywhere = 2.0.3 included functionality that allowed execution of PHP Code Snippets via a WordPress gutenberg block by any user able to edit posts...

9.9CVSS0.02622EPSS

SaveExploits3References1

Mend•added 2022/02/16 4:38 p.m.•0 views

CVE-2022-24663

PHP Everywhere = 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress shortcodes, which can be used by any authenticated user...

9.9CVSS0.02064EPSS

SaveExploits2References1

Vulnrichment•added 2022/02/16 4:38 p.m.•8 views

CVE-2022-24664 Remote Code Execution by by Contributor+ users via WordPress metabox

PHP Everywhere = 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress metaboxes, which could be used by any user able to edit posts...

9.9CVSS9.6AI score0.01664EPSS

SaveExploits2References1

Cvelist•added 2022/02/16 4:38 p.m.•52 views

CVE-2022-24664 Remote Code Execution by by Contributor+ users via WordPress metabox

PHP Everywhere = 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress metaboxes, which could be used by any user able to edit posts...

9.9CVSS9.8AI score0.01664EPSS

SaveExploits2References1

CVE•added 2022/02/16 4:38 p.m.•239 views

CVE-2022-24664

CVE-2022-24664 affects the WordPress PHP Everywhere plugin. Vulnerable in versions

9.9CVSS8.8AI score0.01664EPSS

SaveIn wildExploits2References1Affected Software1

Mend•added 2022/02/16 4:38 p.m.•0 views

CVE-2022-24664

PHP Everywhere = 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress metaboxes, which could be used by any user able to edit posts...

9.9CVSS0.01664EPSS

SaveExploits2References1

attackerkb•added 2022/02/16 12:00 a.m.•34 views

CVE-2022-24665

PHP Everywhere = 2.0.3 included functionality that allowed execution of PHP Code Snippets via a WordPress gutenberg block by any user able to edit posts. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

9.9CVSS7.1AI score0.02622EPSS

SaveIn wildExploits3References2

attackerkb•added 2022/02/16 12:00 a.m.•45 views

CVE-2022-24664

PHP Everywhere = 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress metaboxes, which could be used by any user able to edit posts. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

9.9CVSS7.1AI score0.01664EPSS

SaveIn wildExploits2References2

Rapid7 Vulnerability Database (full)•added 2022/02/16 12:00 a.m.•4 views

CVE-2022-24665: Improper Control of Generation of Code

PHP Everywhere = 2.0.3 included functionality that allowed execution of PHP Code Snippets via a WordPress gutenberg block by any user able to edit posts...

9.9CVSS8.1AI score0.02622EPSS

SaveExploits3References3

Rapid7 Vulnerability Database (full)•added 2022/02/16 12:00 a.m.•4 views

CVE-2022-24663: Improper Control of Generation of Code

PHP Everywhere = 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress shortcodes, which can be used by any authenticated user...

9.9CVSS8.1AI score0.02064EPSS

SaveExploits2References3

Rapid7 Vulnerability Database (full)•added 2022/02/16 12:00 a.m.•6 views

CVE-2022-24664: Improper Control of Generation of Code

PHP Everywhere = 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress metaboxes, which could be used by any user able to edit posts...

9.9CVSS8.1AI score0.01664EPSS

SaveExploits2References3

hivepro•added 2022/02/11 7:36 a.m.•156 views

Critical remote code execution vulnerabilities in WordPress PHP everywhere Plugin

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here Three critical remote code execution RCE vulnerabilities in a WordPress plugin PHP everywhere have been discovered. It is a plugin that allows web developers to utilize PHP code in pages, posts, the sidebar, or anywhere on...

1.2AI score0.02622EPSS

SaveExploits3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by