3.5
Low
CVE-2024-0756 The Insert or Embed Articulate Content into WordPress plugin through 4.3000000023 lacks validation of URLs when adding…
Description
The Insert or Embed Articulate Content into WordPress plugin through 4.3000000023 lacks validation of URLs when adding iframes, allowing attackers to inject an iFrame in the page and thus load arbitrary content from any page.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Insert or Embed Articulate Content into WordPress 4.3000000023 | earliest → 4.3000000023 | No fix stated |
Other CVEs of Insert or Embed Articulate Content into WordPress
The 4 CVEs of Insert or Embed Articulate Content into WordPress →
CVE-2026-16060
The Insert or Embed Articulate Content into WordPress plugin through 4.3000000027 does not correctly validate the…
9.8
Critical
CVE-2024-5630
The Insert or Embed Articulate Content into WordPress plugin before 4.3000000024 does not prevent authors from uploading…
8.8
High
CVE-2024-0757
The Insert or Embed Articulate Content into WordPress plugin through 4.3000000023 is not properly filtering which file…
5.4
Medium