← Back

Hitreach

hitreach

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Allow Php In Posts And Pages
allow_php_in_posts_and_pages
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-4994
1Hitreach
1Allow Php In Posts And Pages
Jun 17, 2026
Sep 16, 2023
N/A· v4
6.4 MEDIUM· v3
N/A· v2
The Allow PHP in Posts and Pages plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.0.4 via the 'php' shortcode. This allows authenticated attackers with subscriber-level perm...Show more
The Allow PHP in Posts and Pages plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.0.4 via the 'php' shortcode. This allows authenticated attackers with subscriber-level permissions or above, to execute code on the server.Show less