Medium severity5.4NVD Advisory· Published Jun 4, 2024· Updated Jun 17, 2026

CVE-2024-0756

Description

The Insert or Embed Articulate Content into WordPress plugin through 4.3000000023 lacks validation of URLs when adding iframes, allowing attackers to inject an iFrame in the page and thus load arbitrary content from any page.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Insert Or Embed Articulate Content Into Wordpressllm-fuzzy2 versions
<=4.3000000023+ 1 more
- (no CPE)range: <=4.3000000023
- (no CPE)
Package: https://wordpress.org/plugins/insert-or-embed-articulate-content-into-wordpress
Elearningfreak/Insert Or Embed Articulate Content
cpe:2.3:a:elearningfreak:insert_or_embed_articulate_content:*:*:*:*:*:wordpress:*:*
Range: <=4.3000000023

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/9130a42d-fca3-4f9c-ab97-d5e0a7a5cef2/nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000