Approved changes feed: RSS · Atom

cpe:2.3:a:elearningfreak:insert_or_embed_articulate_content:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorElearningfreak (f09ae630-2bc9-590f-9f52-3578d473489e)
ProductInsert Or Embed Articulate Content (758fc81e-ccda-5fe0-b8b3-e279119ab508)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-5630 vulnerable 2026-06-08 06:56:16.825886 Insert or Embed Articulate Content into WordPress < 4.3000000024 - Author+ Arbitrary File Upload
The Insert or Embed Articulate Content into WordPress plugin before 4.3000000024 does not prevent authors from uploading arbitrary files to the site, which may allow them to upload PHP shells on affected sites.
Published: 2024-07-15T06:00:02.225Z
Updated: 2024-08-01T21:18:06.829Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0757 vulnerable 2026-06-08 06:22:02.061643 Insert or Embed Articulate Content into WordPress <= 4.3000000023 - Author+ Upload to RCE
The Insert or Embed Articulate Content into WordPress plugin through 4.3000000023 is not properly filtering which file extensions are allowed to be imported on the server, allowing the uploading of malicious code within zip files
Published: 2024-06-04T06:00:02.008Z
Updated: 2025-03-27T21:04:01.050Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0756 vulnerable 2026-06-08 06:22:02.061185 Insert or Embed Articulate Content into WordPress <= 4.3000000023 - Iframe Injection
The Insert or Embed Articulate Content into WordPress plugin through 4.3000000023 lacks validation of URLs when adding iframes, allowing attackers to inject an iFrame in the page and thus load arbitrary content from any page.
Published: 2024-06-04T14:28:07.852Z
Updated: 2026-03-03T17:07:37.355Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50824 vulnerable 2026-06-08 06:16:16.799899 WordPress Insert or Embed Articulate Content into WordPress Plugin <= 4.3000000021 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brian Batt Insert or Embed Articulate Content into WordPress allows Stored XSS.This issue affects Insert or Embed Articulate Content into WordPress: from n/a through 4.3000000021.
Published: 2023-12-21T14:42:04.982Z
Updated: 2026-04-28T16:08:59.067Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15649 vulnerable 2026-06-08 05:12:57.743407 Details available
The insert-or-embed-articulate-content-into-wordpress plugin before 4.2999 for WordPress has insufficient restrictions on file upload.
Published: 2019-08-27T11:45:43.000Z
Updated: 2024-08-05T00:56:22.404Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-15648 vulnerable 2026-06-08 05:12:57.743010 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.