CVE-2019-15649

CVE-2019-15649 affects the WordPress plugin insert-or-embed-articulate-content-into-wordpress prior to version 4.2999. The vulnerability stems from insufficient restrictions on file uploads in the plugin, enabling potential unauthenticated or authenticated abuse leading to remote code execution (...

CVE-2019-15648

The CVE-2019-15648 impact is tied to the WordPress plugin insert-or-embed-articulate-content-into-wordpress, prior to version 4.29991. The underlying issue is insufficient access controls for deleting or renaming content, exploitable by an authenticated user with roles as low as Subscriber. The c...