WordPress plugin
PHP Execution security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High1
- Medium0
- Low0
All PHP Execution vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.8 | Cross Site Request Forgery ≤1.0.0No patch available | CVE-2023-23879 |
- High8.8Cross Site Request Forgery
≤1.0.0No patch available
PHP Execution: common questions
Does PHP Execution have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in PHP Execution: 1 high. At least one is not fixed in the latest version.
How do I check which version of PHP Execution I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent PHP Execution vulnerability?
CVE-2023-23879, published Feb 2, 2023: PHP Execution <= 1.0.0 - Cross Site Request Forgery. Severity: High (CVSS 8.8).
Is any PHP Execution vulnerability listed in CISA KEV?
No. None of the known PHP Execution vulnerabilities is currently listed in the CISA KEV catalog.