CVE-2024-5630 Insert or Embed Articulate Content into WordPress < 4.3000000024 - Author+ Arbitrary File Upload

2024-07-1506:00:02

WPScan

www.cve.org

wordpress

articulate

arbitrary file upload

php shells

cve-2024-5630

EPSS

0.001

Percentile

19.7%

JSON

The Insert or Embed Articulate Content into WordPress plugin before 4.3000000024 does not prevent authors from uploading arbitrary files to the site, which may allow them to upload PHP shells on affected sites.

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "Insert or Embed Articulate Content into WordPress",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThan": "4.3000000024"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

wpscan.com/vulnerability/538c875f-4c20-4be0-8098-5bddb7aecff4/

EPSS

0.001

Percentile

19.7%

JSON

Related for CVELIST:CVE-2024-5630