CVE-2024-0757: medium-severity vulnerability in Insert or Embed Articulate Content into…
Insert or Embed Articulate Content into WordPress <= 4.3000000023 - Author+ Upload to RCE
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.4epss 0.9%
The Insert or Embed Articulate Content into WordPress plugin through 4.3000000023 is not properly filtering which file extensions are allowed to be imported on the server, allowing the uploading of malicious code within zip files
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Affected products
Unknown · Insert or Embed Articulate Content into WordPressRelated CVEs — Insert or Embed Articulate Content into…
In the same product, most dangerous first.
CVE-2026-16060CRITICALInsert or Embed Articulate Content into WordPress <= 4.3000000027 - Editor+ Arbitrary File UploadEPSS 0.8%CVE-2024-5630HIGHInsert or Embed Articulate Content into WordPress < 4.3000000024 - Author+ Arbitrary File UploadEPSS 0.7%CVE-2024-0756LOWInsert or Embed Articulate Content into WordPress <= 4.3000000023 - Iframe InjectionEPSS 0.2%