CVE-2024-0757: falha de média gravidade em Insert or Embed Articulate Content into…
Insert or Embed Articulate Content into WordPress <= 4.3000000023 - Author+ Upload to RCE
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.4epss 0.9%
The Insert or Embed Articulate Content into WordPress plugin through 4.3000000023 is not properly filtering which file extensions are allowed to be imported on the server, allowing the uploading of malicious code within zip files
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Produtos afetados
Unknown · Insert or Embed Articulate Content into WordPressCVEs relacionadas — Insert or Embed Articulate Content into…
No mesmo produto, das mais perigosas para as menos.
CVE-2026-16060CRITICALInsert or Embed Articulate Content into WordPress <= 4.3000000027 - Editor+ Arbitrary File UploadEPSS 0.8%CVE-2024-5630HIGHInsert or Embed Articulate Content into WordPress < 4.3000000024 - Author+ Arbitrary File UploadEPSS 0.7%CVE-2024-0756LOWInsert or Embed Articulate Content into WordPress <= 4.3000000023 - Iframe InjectionEPSS 0.2%