Description
WordPress Plugin PHP Everywhere is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently make themselves administrators and execute PHP code. WordPress Plugin PHP Everywhere version 1.3 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.4 or latest
References
Related Vulnerabilities
MySQL CVE-2021-2001 Vulnerability (CVE-2021-2001)
Sqlite Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-6607)
WordPress Plugin ChimpMate-WordPress MailChimp Assistant Local File Inclusion (1.3.2)
WordPress Plugin WP Visitor Statistics (Real Time Traffic) Security Bypass (5.4)
Oracle HTTP Server Improper Encoding or Escaping of Output Vulnerability (CVE-2022-25235)