CVE-2022-24664

Publication date

2022-02-16 16:38:04

Family

Wordfence

State

PUBLISHED

Description

PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress metaboxes, which could be used by any user able to edit posts.