CVE-2022-24665
Remote Code Execution by by Contributor+ users via WordPress gutenberg block
HIGH 8.8EPSS 2.6%
PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via a WordPress gutenberg block by any user able to edit posts.
- Affected
- Alexander Fuchs · PHP Everywhere
- CVSS v3.1 NVD
- 8.8 HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v3.1 WORDFENCE
- 9.9 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H - CVSS v2.0 NVD
- 6.5 MEDIUM
AV:N/AC:L/Au:S/C:P/I:P/A:P - EPSS
- 2.62% chance of exploitation in the next 30 days, 85th percentile
- Published
- 2022-02-16
- Updated
- 2025-01-31