CVE-2024-0757

The Insert or Embed Articulate Content into WordPress plugin through 4.3000000023 is not properly filtering which file extensions are allowed to be imported on the server, allowing the uploading of malicious code within zip files

CVSS v3.1

5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS

0.94% chance of exploitation in the next 30 days, 58th percentile

Published

2024-06-04

Updated

2025-03-27

Proof-of-concept exploits (2)

• https://wpscan.com/vulnerability/eccd017c-e442-46b6-b5e6-aec7bbd5f836/
• hunThubSpace/CVE-2024-0757-Exploit8★ · 2024-06-18

References

• CVE Record
• NVD entry

Related

• CVE-2024-3105
• CVE-2024-0756
• CVE-2024-0760
• CVE-2024-0741
• CVE-2024-0762
• CVE-2024-0739