CVE-2024-5630 Insert or Embed Articulate Content into WordPress < 4.3000000024 - Author+ Arbitrary File Upload

2024-07-1506:00:02

WPScan

github.com

wordpress

plugin

arbitrary file upload

vulnerability

cve-2024-5630

php shells

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

19.7%

SSVC

Exploitation

poc

Automatable

Technical Impact

total

JSON

The Insert or Embed Articulate Content into WordPress plugin before 4.3000000024 does not prevent authors from uploading arbitrary files to the site, which may allow them to upload PHP shells on affected sites.

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "Insert or Embed Articulate Content into WordPress",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "4.3000000024",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:elearningfreak:insert_or_embed_articulate_content:*:*:*:*:*:wordpress:*:*"
    ],
    "vendor": "elearningfreak",
    "product": "insert_or_embed_articulate_content",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "4.3000000024",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]