PHP Everywhere < 3.0.0 - Subscriber+ RCE via Shortcode

The plugin allows any authenticated users, such as subscriber to execute PHP via the phpeverywhere shortcode...

WordPress plugin代码注入漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. A code injection vulnerability exists in the Worpress plugin...

PHP Everywhere 2.0.3 Remote Code Execution Vulnerability

On January 4, 2022, the Wordfence Threat Intelligence team began the responsible disclosure process for several Remote Code Execution vulnerabilities in PHP Everywhere, a WordPress plugin installed on over 30,000 websites. One of these vulnerabilities allowed any authenticated user of any level,...

WordPress plugin 代码注入漏洞

WordPress is a blogging platform developed by the WordPress Wordpress Foundation using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.PHP Everywhere is a Wordpress plugin. A security vulnerability exists in the WordPress plugin PHP Everywhere,...

CVE-2021-23227

Cross-Site Request Forgery CSRF vulnerability in Alexander Fuchs PHP Everywhere plugin = 2.0.2 versions...

CVE-2021-23227

Cross-Site Request Forgery CSRF vulnerability in Alexander Fuchs PHP Everywhere plugin = 2.0.2 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Alexander Fuchs PHP Everywhere plugin = 2.0.2 versions...

CVE-2021-23227

CVE-2021-23227 concerns the WordPress PHP Everywhere plugin, where versions ≤ 2.0.2 are vulnerable to a CSRF flaw due to missing CSRF checks when updating settings. Multiple connected sources (WPVulnDB entry, PatchStack, PT-2022-9381, CNNVD, etc.) describe this CSRF, including an indication that ...

CVE-2021-23227 WordPress PHP Everywhere Plugin <= 2.0.2 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Alexander Fuchs PHP Everywhere plugin = 2.0.2 versions...

Wordpress Plugin PHP Everywhere 跨站请求伪造漏洞

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.PHP Everywhere is a Wordpress plugin. A cross-site request forgery vulnerability exists in the Wordpress Plugin PHP...

PHP Everywhere < 2.0.3 - Arbitrary Settings Update via CSRF

The plugin does not have CSRF check when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

WordPress PHP Everywhere plugin <= 2.0.3 - Remote Code Execution (RCE) vulnerability

Remote Code Execution RCE vulnerability discovered by Ex.Mi Patchstack in WordPress PHP Everywhere plugin versions = 2.0.3. Solution Update the WordPress PHP Everywhere plugin to the latest available version at least 3.0.0...

WordPress PHP Everywhere plugin <= 2.0.2 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability discovered by Rasi Afeef in WordPress PHP Everywhere plugin versions = 2.0.2. Solution Update the WordPress PHP Everywhere plugin to the latest available version at least 2.0.3...