T
he Insert or Embed Articulate Content into WordPress plugin through 4.3000000023 is not properly filtering which file extensions are allowed to be imported on the server, allowing the uploading of malicious code within zip files
References
| Link | Resource |
|---|---|
| https://wpscan.com/vulnerability/eccd017c-e442-46b6-b5e6-aec7bbd5f836/ | Exploit Third Party Advisory |
| https://wpscan.com/vulnerability/eccd017c-e442-46b6-b5e6-aec7bbd5f836/ | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
21 May 2025, 19:09
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Elearningfreak
Elearningfreak insert Or Embed Articulate Content |
|
| CPE | cpe:2.3:a:elearningfreak:insert_or_embed_articulate_content:*:*:*:*:*:wordpress:*:* | |
| References | () https://wpscan.com/vulnerability/eccd017c-e442-46b6-b5e6-aec7bbd5f836/ - Exploit, Third Party Advisory |
27 Mar 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-434 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
21 Nov 2024, 08:47
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://wpscan.com/vulnerability/eccd017c-e442-46b6-b5e6-aec7bbd5f836/ - |
04 Jun 2024, 16:57
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-06-04 06:15
Updated : 2025-05-21 19:09
NVD link : CVE-2024-0757
Mitre link : CVE-2024-0757
CVE.ORG link : CVE-2024-0757
JSON object : View
Products Affected
CWE
CWE-434
Unrestricted Upload of File with Dangerous Type