Alexander Fuchs

Products

ProductCVEsExploitedLatest
PHP Everywhere3–Feb 16, 2022
PHP Everywhere (WordPress plugin)1–Jan 13, 2022

Exploited and recent CVEs

  • CVE-2022-24665 Critical 9.9 Remote Code Execution by by Contributor+ users via WordPress gutenberg block 2.6%
  • CVE-2022-24663 Critical 9.9 Remote Code Execution by Subscriber+ users via WordPress shortcode 2.1%
  • CVE-2022-24664 Critical 9.9 Remote Code Execution by by Contributor+ users via WordPress metabox 1.7%
  • CVE-2021-23227 Medium 5.4 WordPress PHP Everywhere Plugin <= 2.0.2 is vulnerable to Cross Site Request Forgery (CSRF) 0.4%