CVE-2024-0757: Insert or Embed Articulate Content into WordPress <= 4.3000000023 - Author+ Upload to RCE

Severity: medium (CVSS 5.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2024-06-04 · updated 2026-06-17
Weakness: CWE-434

Description

The Insert or Embed Articulate Content into WordPress plugin through 4.3000000023 is not properly filtering which file extensions are allowed to be imported on the server, allowing the uploading of malicious code within zip files

Affected products

Insert or Embed Articulate Content into WordPress: through 4.3000000023

References

https://wpscan.com/vulnerability/eccd017c-e442-46b6-b5e6-aec7bbd5f836/
https://wpscan.com/vulnerability/eccd017c-e442-46b6-b5e6-aec7bbd5f836/

Get alerted when CVE-2024-0757 or the next vulnerability affects your stack