VULNERABILITY INTELLIGENCE
CVE-2024-0757
CVSS score5.4 MEDIUM
EPSS probability0.94%
CISA KEVNot currently listed
Published2024-06-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Description
The Insert or Embed Articulate Content into WordPress plugin through 4.3000000023 is not properly filtering which file extensions are allowed to be imported on the server, allowing the uploading of malicious code within zip files
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-434
Primary references
- contact@wpscan.com — Exploit, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory