Elearningfreak Insert Or Embed Articulate Content — known CVE vulnerabilities

Every CVE whose affected-product data names Elearningfreak Insert Or Embed Articulate Content, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2019-15649 — CVSS 8.8 (high): The insert-or-embed-articulate-content-into-wordpress plugin before 4.2999 for WordPress has insufficient restrictions on file upload.
• CVE-2024-5630 — CVSS 8.8 (high): The Insert or Embed Articulate Content into WordPress plugin before 4.3000000024 does not prevent authors from uploading arbitrary files to…
• CVE-2019-15648 — CVSS 6.5 (medium): The insert-or-embed-articulate-content-into-wordpress plugin before 4.29991 for WordPress has insufficient restrictions on deleting or…
• CVE-2023-50824 — CVSS 6.5 (medium): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brian Batt Insert or Embed Articulate…
• CVE-2024-0756 — CVSS 5.4 (medium): The Insert or Embed Articulate Content into WordPress plugin through 4.3000000023 lacks validation of URLs when adding iframes, allowing…
• CVE-2024-0757 — CVSS 5.4 (medium): The Insert or Embed Articulate Content into WordPress plugin through 4.3000000023 is not properly filtering which file extensions are…