CVE-2022-24664

ALTO 8.8CVE-2022-24664 · Published 16/02/2022 · updated 17/06/2026

En resumen

CVE-2022-24664 es una vulnerabilidad ALTO (CVSS 8.8) que afecta a php everywhere (php everywhere project).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.7%, mayor que el 76.8% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
php everywhere php_everywhere_project	`≤ 2.0.3`	No fix yet

Description

PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress metaboxes, which could be used by any user able to edit posts.

References

wordfence.com/blog/2022/02/critical-vulnerabilities-in-php-everywhere-allow-remote-code-execution · Third Party Advisory

Más vulnerabilidades de php everywhere

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free