CVE-2024-0757

PoC —

CVSS 3.1

5.4 medium

EPSS

<1%p59

Published

Jun 4, 2024 (Jun 4, 2024)

Modified

Jun 17, 2026

Description

The Insert or Embed Articulate Content into WordPress plugin through 4.3000000023 is not properly filtering which file extensions are allowed to be imported on the server, allowing the uploading of malicious code within zip files

Vendors: elearningfreak
Products: insert or embed articulate content
Ecosystems: WordPress
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.