PatchTheCVE: php everywhere projecthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2022-24665: PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via a WordPress guthttps://patchthecve.com/cve/CVE-2022-24665.htmlhttps://patchthecve.com/cve/CVE-2022-24665.htmlWed, 17 Jun 2026 04:32:15 +0000CRITICAL 9.9: PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via a WordPress gutenberg block by any user able to edit posts.CVE-2022-24664: PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress metabhttps://patchthecve.com/cve/CVE-2022-24664.htmlhttps://patchthecve.com/cve/CVE-2022-24664.htmlWed, 17 Jun 2026 04:32:15 +0000CRITICAL 9.9: PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress metaboxes, which could be used by any user able to edit posts.CVE-2022-24663: PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress shorthttps://patchthecve.com/cve/CVE-2022-24663.htmlhttps://patchthecve.com/cve/CVE-2022-24663.htmlWed, 17 Jun 2026 04:32:14 +0000CRITICAL 9.9: PHP Everywhere <= 2.0.3 included functionality that allowed execution of PHP Code Snippets via WordPress shortcodes, which can be used by any authenticated user.CVE-2021-23227: Cross-Site Request Forgery (CSRF) vulnerability in Alexander Fuchs PHP Everywhere plugin <= 2.0.2 versions.https://patchthecve.com/cve/CVE-2021-23227.htmlhttps://patchthecve.com/cve/CVE-2021-23227.htmlWed, 17 Jun 2026 03:38:27 +0000MEDIUM 5.4: Cross-Site Request Forgery (CSRF) vulnerability in Alexander Fuchs PHP Everywhere plugin <= 2.0.2 versions.