9.8
Critical
CVE-2026-16060 The Insert or Embed Articulate Content into WordPress plugin through 4.3000000027 does not correctly validate the…
Description
The Insert or Embed Articulate Content into WordPress plugin through 4.3000000027 does not correctly validate the contents of an uploaded archive, relying on a bypassable check that lets an Editor-level user upload a server-executable file into a public directory, resulting in remote code execution on servers configured to execute it.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Insert or Embed Articulate Content into WordPress 4.3000000027 | earliest → 4.3000000027 | No fix stated |
Other CVEs of Insert or Embed Articulate Content into WordPress
The 4 CVEs of Insert or Embed Articulate Content into WordPress →
CVE-2024-5630
The Insert or Embed Articulate Content into WordPress plugin before 4.3000000024 does not prevent authors from uploading…
8.8
High
CVE-2024-0756
The Insert or Embed Articulate Content into WordPress plugin through 4.3000000023 lacks validation of URLs when adding…
3.5
Low
CVE-2024-0757
The Insert or Embed Articulate Content into WordPress plugin through 4.3000000023 is not properly filtering which file…
5.4
Medium