← Database

CVE-2022-24664

CRITICAL CVSS: 9.9 Published: 2022-02-16 Modified: 2026-06-17

Description

PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress metaboxes, which could be used by any user able to edit posts.

Affected Platforms

Php Everywhere Project Php Everywhere

Weakness Type

CWE-94, CWE-94

References