CVE-2024-0757

Insert or Embed Articulate Content into WordPress <= 4.3000000023 - Author+ Upload to RCE

The Insert or Embed Articulate Content into WordPress plugin through 4.3000000023 is not properly filtering which file extensions are allowed to be imported on the server, allowing the uploading of malicious code within zip files

Affected

Insert or Embed Articulate Content into WordPress

CVSS v3.1 CNA

5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS

0.94% chance of exploitation in the next 30 days, 60th percentile

Published

2024-06-04

Updated

2025-03-27

Proof-of-concept exploits (2)

• https://wpscan.com/vulnerability/eccd017c-e442-46b6-b5e6-aec7bbd5f836/
• hunThubSpace/CVE-2024-0757-Exploit8★ · 2024-06-18

Security advisories

• https://wpscan.com/vulnerability/eccd017c-e442-46b6-b5e6-aec7bbd5f836

References

• CVE Record
• NVD entry

Related

• CVE-2024-3105