9.8
Critique
CVE-2026-16060 The Insert or Embed Articulate Content into WordPress plugin through 4.3000000027 does not correctly validate the…
Description
The Insert or Embed Articulate Content into WordPress plugin through 4.3000000027 does not correctly validate the contents of an uploaded archive, relying on a bypassable check that lets an Editor-level user upload a server-executable file into a public directory, resulting in remote code execution on servers configured to execute it.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Insert or Embed Articulate Content into WordPress 4.3000000027 | premières → 4.3000000027 | Pas de correctif indiqué |
Autres CVE de Insert or Embed Articulate Content into WordPress
Les 4 CVE de Insert or Embed Articulate Content into WordPress →
CVE-2024-5630
The Insert or Embed Articulate Content into WordPress plugin before 4.3000000024 does not prevent authors from uploading…
8.8
Élevée
CVE-2024-0756
The Insert or Embed Articulate Content into WordPress plugin through 4.3000000023 lacks validation of URLs when adding…
3.5
Faible
CVE-2024-0757
The Insert or Embed Articulate Content into WordPress plugin through 4.3000000023 is not properly filtering which file…
5.4
Moyenne