CVE-2024-0757

The Insert or Embed Articulate Content into WordPress plugin (versions up to and including 4.3000000023 ) is vulnerable to unrestricted file upload due to insufficient filtering of file extensions during zip archive imports. This allows unauthenticated attackers to upload malicious phar files to ...

CVE-2024-0756

CVE-2024-0756 concerns the WordPress plugin Insert or Embed Articulate Content into WordPress, affected through v4.3000000023. The issue stems from insufficient URL validation when adding iframes, enabling an attacker to inject an iframe and load arbitrary content from any page. Public references...