PT-2024-15797 · WordPress · Insert/Embed Articulate Content Into Wordpress

Dmitry Ignatyev · Published 2024-06-04 · Updated 2026-03-03 · CVE-2024-0756

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Insert or Embed Articulate Content into WordPress plugin versions through 4.3000000023

Description The issue lacks validation of URLs when adding iframes, allowing attackers to inject an iFrame in the page and thus load arbitrary content from any page.

Recommendations For versions through 4.3000000023, consider disabling the iframe addition feature until a patch is available. Restrict access to the iframe functionality to minimize the risk of exploitation. Avoid using the plugin to add iframes from untrusted sources until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-0756

Affected Products

Insert/Embed Articulate Content Into Wordpress

References · 6

• 🔥 https://wpscan.com/vulnerability/9130a42d-fca3-4f9c-ab97-d5e0a7a5cef2 · Exploit
• https://osv.dev/vulnerability/CVE-2024-0756 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-0756 · Security Note
• https://t.me/cveNotify/154000 · Telegram Post
• https://t.me/cvenotify/82112 · Telegram Post
• https://t.me/cvenotify/81935 · Telegram Post