VulnTitan VulnTitan Security command center
Plugin Vulnerability Hub
Plugin 6 known issues Latest disclosed Apr 08, 2025

Insert or Embed Articulate Content into WordPress Vulnerabilities

Review known vulnerability records for the WordPress plugin Insert or Embed Articulate Content into WordPress (`insert-or-embed-articulate-content-into-wordpress`), including severity, CVE references, affected versions, and patch status.

Recent tracked CVEs on this page include CVE-2025-32202, CVE-2024-5630 and CVE-2024-0756, so operators can jump from disclosure to patch validation without scanning the full feed first.

View on WordPress.org Back to Feed
Known Records
6
High or Critical
3
Patch Coverage
100%
Last Updated
Feb 25, 2026
Priority CVE Quick Links

Fast paths into Insert or Embed Articulate Content into WordPress CVE reports

Start with the highest-signal CVE records for this WordPress plugin before scanning the full vulnerability feed.

Indexed CVEs
6
CVE-2024-5630 High 4.3000000024
CVE-2024-5630 Insert or Embed Articulate Content into WordPress Remote Code Execution

Insert or Embed Articulate Content into WordPress <= 4.3000000023 - Authenticated (Author+) Arbitrary File Upload

CVE-2019-15649 High 4.2999
CVE-2019-15649 Insert or Embed Articulate Content into WordPress Arbitrary File Upload

Insert or Embed Articulate Content into WordPress < 4.2999 - Arbitrary File Upload

CVE-2025-32202 High 4.3000000026
CVE-2025-32202 Insert or Embed Articulate Content into WordPress Remote Code Execution

Insert or Embed Articulate Content into WordPress <= 4.3000000025 - Authenticated (Editor+) Arbitrary File Upload

CVE-2019-15648 Medium 4.29991
CVE-2019-15648 Insert or Embed Articulate Content into WordPress Vulnerability

Insert or Embed Articulate Content into WordPress < 4.29991 - Directory Traversal

CVE-2024-0756 Medium 4.3000000025
CVE-2024-0756 Insert or Embed Articulate Content into WordPress File Upload

Insert or Embed Articulate Content into WordPress <= 4.3000000023 - Authenticated (Author+) Stored Cross-Site Scripting via Code Injection

CVE-2023-50824 Medium 4.3000000023
CVE-2023-50824 Insert or Embed Articulate Content into WordPress Stored Cross-Site Scripting

Insert or Embed Articulate Content into WordPress <= 4.3000000021 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode

Coverage Snapshot

What this page helps you verify fast

This hub clusters every indexed record for Insert or Embed Articulate Content into WordPress so operators can confirm whether a disclosed issue maps to the installed slug, version range, and patch path.

Patch Visibility
6 records include a published patch path, leaving 0 with no listed safe release yet.
Severity Mix
0 critical and 3 high severity findings.
Recent CVEs
CVE-2025-32202, CVE-2024-5630 and CVE-2024-0756
Reference Workflow
Jump from the hub into the full report when you need remediation notes, exploit context, CVSS vectors, or source references.
Triage First

Open the records most likely to drive action

These recent records surface the CVE strings, patch cues, and direct report links most operators need first.

Known Vulnerabilities

Reports for Insert or Embed Articulate Content into WordPress

Sorted by latest disclosure date so newly published issues surface first.

Plugin High Patched: Yes CVE-2025-32202
CVE-2025-32202: Insert or Embed Articulate Content into WordPress <= 4.3000000025 - Authenticated (Editor+) Arbitrary File Upload

The Insert or Embed Articulate Content into WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 4.3000000025. This makes it possible for authenticated attackers, with Editor-level access...

Published
Apr 08, 2025
Patched Release
4.3000000026
Affected Versions
Versions up to 4.3000000025
Next Step
Update to 4.3000000026 or newer if supported.
Open CVE-2025-32202 Report Open CVE Reference
Plugin High Patched: Yes CVE-2024-5630
CVE-2024-5630: Insert or Embed Articulate Content into WordPress <= 4.3000000023 - Authenticated (Author+) Arbitrary File Upload

The Insert or Embed Articulate Content into WordPress plugin for WordPress is vulnerable to arbitrary file uploads through insecure file uploads in a zip archive in all versions up to, and including, 4.3000000023. This makes it possible for unauthenticated attackers to upload zip...

Published
Jun 24, 2024
Patched Release
4.3000000024
Affected Versions
Versions up to 4.3000000023
Next Step
Update to 4.3000000024 or newer if supported.
Open CVE-2024-5630 Report Open CVE Reference
Plugin Medium Patched: Yes CVE-2024-0756
CVE-2024-0756: Insert or Embed Articulate Content into WordPress <= 4.3000000023 - Authenticated (Author+) Stored Cross-Site Scripting via Code Injection

The Insert or Embed Articulate Content into WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via e-Learning widget file upload in all versions up to, and including, 4.3000000023 due to insufficient input sanitization and output escaping. This makes it p...

Published
May 14, 2024
Patched Release
4.3000000025
Affected Versions
Versions up to 4.3000000023
Next Step
Update to 4.3000000025 or newer if supported.
Open CVE-2024-0756 Report Open CVE Reference
Plugin Medium Patched: Yes CVE-2023-50824
CVE-2023-50824: Insert or Embed Articulate Content into WordPress <= 4.3000000021 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode

The Insert or Embed Articulate Content into WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 4.3000000021 due to insufficient input sanitization and output escaping on user supplied att...

Published
Dec 19, 2023
Patched Release
4.3000000023
Affected Versions
Versions up to 4.3000000021
Next Step
Update to 4.3000000023 or newer if supported.
Open CVE-2023-50824 Report Open CVE Reference
Plugin Medium Patched: Yes CVE-2019-15648
CVE-2019-15648: Insert or Embed Articulate Content into WordPress < 4.29991 - Directory Traversal

The Insert or Embed Articulate Content into WordPress plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 4.2999 via the rename_dir. This allows authenticated user with a role as low as subscriber to delete and rename arbitrary folders.

Published
Jul 02, 2019
Patched Release
4.29991
Affected Versions
Versions before 4.29991
Next Step
Update to 4.29991 or newer if supported.
Open CVE-2019-15648 Report Open CVE Reference
Plugin High Patched: Yes CVE-2019-15649
CVE-2019-15649: Insert or Embed Articulate Content into WordPress < 4.2999 - Arbitrary File Upload

The insert-or-embed-articulate-content-into-wordpress plugin before 4.2999 for WordPress has insufficient restrictions on file upload.

Published
Jun 11, 2019
Patched Release
4.2999
Affected Versions
Versions before 4.2999
Next Step
Update to 4.2999 or newer if supported.
Open CVE-2019-15649 Report Open CVE Reference