Critical Vulnerabilities in PHP Everywhere Allow Remote Code Execution

🗓️ 08 Feb 2022 15:01:31Reported by Ram GallType

Critical Vulnerabilities in PHP Everywhere Allow Remote Code Execution. Wordpress plugin had a critical Remote Code Execution vulnerability, allowing any user to execute arbitrary PHP code on the affected sites

Reporter	Title	Published	Views	Family All 52
zdt	PHP Everywhere 2.0.3 Remote Code Execution Vulnerability	8 Feb 202200:00	–	zdt
ICS	North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs	25 Jul 202412:00	–	ics
ATTACKERKB	CVE-2022-24665	16 Feb 202200:00	–	attackerkb
ATTACKERKB	CVE-2022-24664	16 Feb 202200:00	–	attackerkb
ATTACKERKB	CVE-2022-24663	16 Feb 202200:00	–	attackerkb
BDU FSTEC	The vulnerability of the wp_ajax_parse_media_shortcode() function in the PHP plugin for implementing PHP Everywhere allows a hacker to execute arbitrary code.	22 Feb 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability lies in the implementation of the edit_posts permission plugin for PHP code, which allows a hacker to execute arbitrary code.	22 Feb 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability lies in the implementation of the edit_posts permission plugin for PHP code, which allows a hacker to execute arbitrary code.	22 Feb 202200:00	–	bdu_fstec
Circl	CVE-2022-24663	10 Feb 202216:20	–	circl
Circl	CVE-2022-24664	10 Feb 202216:20	–	circl

08 Feb 2022 15:01Current

9.7High risk

Vulners AI Score9.7

EPSS0.026