PT-2026-67091 · Undefined · Undefined
CVE-2026-16060
·
Published
2026-08-03
·
Updated
2026-08-03
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
The Insert or Embed Articulate Content into WordPress plugin through 4.3000000027 does not correctly validate the contents of an uploaded archive, relying on a bypassable check that lets an Editor-level user upload a server-executable file into a public directory, resulting in remote code execution on servers configured to execute it.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Undefined