The Insert or Embed Articulate Content into WordPress plugin through 4.3000000023 is not properly filtering which file extensions are allowed to be imported on the server, allowing the uploading of malicious code within zip files
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://wpscan.com/vulnerability/eccd017c-e442-46b6-b5e6-aec7bbd5f836/ | Exploit Third Party Advisory |
| https://wpscan.com/vulnerability/eccd017c-e442-46b6-b5e6-aec7bbd5f836/ | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
21 May 2025, 19:09
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:elearningfreak:insert_or_embed_articulate_content:*:*:*:*:*:wordpress:*:* | |
| First Time |
Elearningfreak insert Or Embed Articulate Content
Elearningfreak |
|
| References | () https://wpscan.com/vulnerability/eccd017c-e442-46b6-b5e6-aec7bbd5f836/ - Exploit, Third Party Advisory |
04 Jun 2024, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-06-04 06:15
Updated : 2025-05-21 19:09
NVD link : CVE-2024-0757
Mitre link : CVE-2024-0757
JSON object : View
Products Affected
elearningfreak
- insert_or_embed_articulate_content
CWE
No CWE.