PT-2022-1624

Name of the Vulnerable Software and Affected Versions PHP Everywhere versions 2.0.3 and earlier Description The issue is related to the incorrect management of code generation in the wp ajax parse media shortcode function of the PHP Everywhere plugin, allowing for the execution of PHP code snippe...

PT-2022-1626

Name of the Vulnerable Software and Affected Versions PHP Everywhere versions prior to 2.0.4 Description The issue is related to the incorrect management of code generation in the PHP Everywhere plugin, specifically with the edit posts capability. This allows any user who can edit posts to execut...

PT-2022-1625

Name of the Vulnerable Software and Affected Versions PHP Everywhere versions 2.0.3 and earlier Description The issue is related to the incorrect management of code generation in the PHP Everywhere plugin, specifically with the edit posts capability. This could allow a remote attacker to execute...

WordPress PHP Everywhere plugin <= 2.0.2 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability discovered by Rasi Afeef in WordPress PHP Everywhere plugin versions = 2.0.2. Solution Update the WordPress PHP Everywhere plugin to the latest available version at least 2.0.3...