CVE-2024-5630

Insert or Embed Articulate Content into WordPress < 4.3000000024 - Author+ Arbitrary File Upload

The Insert or Embed Articulate Content into WordPress plugin before 4.3000000024 does not prevent authors from uploading arbitrary files to the site, which may allow them to upload PHP shells on affected sites.

Affected

Insert or Embed Articulate Content into WordPress

CVSS v3.1 NVD

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.68% chance of exploitation in the next 30 days, 51st percentile

Published

2024-07-15

Updated

2024-08-01

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/538c875f-4c20-4be0-8098-5bddb7aecff4/

Security advisories

• https://wpscan.com/vulnerability/538c875f-4c20-4be0-8098-5bddb7aecff4

References

• CVE Record
• NVD entry