CVE-2024-5630

CVE-2024-5630 affects the WordPress plugin Insert or Embed Articulate Content into WordPress, before version 4.3000000024. The issue is that authors can upload arbitrary files to the site, potentially allowing the upload of PHP shells on affected sites. Root cause per sources is a failure to rest...

CVE-2019-15649

CVE-2019-15649 affects the WordPress plugin insert-or-embed-articulate-content-into-wordpress prior to version 4.2999. The vulnerability stems from insufficient restrictions on file uploads in the plugin, enabling potential unauthenticated or authenticated abuse leading to remote code execution (...

CVE-2019-15648

The CVE-2019-15648 impact is tied to the WordPress plugin insert-or-embed-articulate-content-into-wordpress, prior to version 4.29991. The underlying issue is insufficient access controls for deleting or renaming content, exploitable by an authenticated user with roles as low as Subscriber. The c...