3.5
Faible
CVE-2024-0756 The Insert or Embed Articulate Content into WordPress plugin through 4.3000000023 lacks validation of URLs when adding…
Description
The Insert or Embed Articulate Content into WordPress plugin through 4.3000000023 lacks validation of URLs when adding iframes, allowing attackers to inject an iFrame in the page and thus load arbitrary content from any page.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Insert or Embed Articulate Content into WordPress 4.3000000023 | premières → 4.3000000023 | Pas de correctif indiqué |
Autres CVE de Insert or Embed Articulate Content into WordPress
Les 4 CVE de Insert or Embed Articulate Content into WordPress →
CVE-2026-16060
The Insert or Embed Articulate Content into WordPress plugin through 4.3000000027 does not correctly validate the…
9.8
Critique
CVE-2024-5630
The Insert or Embed Articulate Content into WordPress plugin before 4.3000000024 does not prevent authors from uploading…
8.8
Élevée
CVE-2024-0757
The Insert or Embed Articulate Content into WordPress plugin through 4.3000000023 is not properly filtering which file…
5.4
Moyenne