CVE-2024-0757

Insert or Embed Articulate Content into WordPress <= 4.3000000023 - Author+ Upload to RCE

Medium · published June 4, 2024

CVSS v3.1
5.4
EPSS
1%
Percentile
60.4
In the wild
Unconfirmed
What it is

The Insert or Embed Articulate Content into WordPress plugin through 4.3000000023 is not properly filtering which file extensions are allowed to be imported on the server, allowing the uploading of malicious code within zip files

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00936 · 60.4th percentile
Published
2024-06-04T06:00Z
EPSS history
Timeline
  • 04 JUN 06:00Z
    Insert or Embed Articulate Content into WordPress <= 4.3000000023 - Author+ Upload to RCE
    cvelistv5