Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2768▲ 93 respecto a la semana anterior

Críticas / altas1464▲ 354 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)93▼ 418 respecto a la semana anterior

4 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2022-24665	Modificada	Alta (8.8)	2.6%	—	PHP Everywhere Project PHP Everywhere	16/2/2022	17/6/2026	PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via a WordPress gutenberg block by any user able to edit posts.
CVE-2022-24664	Modificada	Alta (8.8)	1.7%	—	PHP Everywhere Project PHP Everywhere	16/2/2022	17/6/2026	PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress metaboxes, which could be used by any user able to edit posts.
CVE-2022-24663	Modificada	Alta (8.8)	2.0%	—	PHP Everywhere Project PHP Everywhere	16/2/2022	17/6/2026	PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress shortcodes, which can be used by any authenticated user.
CVE-2021-23227	Modificada	Alta (8.8)	0.40%	—	PHP Everywhere Project PHP Everywhere	13/1/2022	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in Alexander Fuchs PHP Everywhere plugin <= 2.0.2 versions.