CVE-2024-0757
Insert or Embed Articulate Content into WordPress <= 4.3000000023 - Author+ Upload to RCE
- State
- Published
- Severity
- 5.4 Medium
- Published
- Jun 4, 2024
- Updated
- Mar 27, 2025
- Reserved
- Jan 19, 2024
Description
The Insert or Embed Articulate Content into WordPress plugin through 4.3000000023 is not properly filtering which file extensions are allowed to be imported on the server, allowing the uploading of malicious code within zip files
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.4 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N | CISA-ADP |
Weaknesses
- CWE-434 Unrestricted Upload of File with Dangerous Type
Affected Products
| Product | Versions |
|---|---|
Insert or Embed Articulate Content into WordPressUnknown |
|
References
- https://wpscan.com/vulnerability/eccd017c-e442-46b6-b5e6-aec7bbd5f836/exploitvdb-entrytechnical-description
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.