Critical severity9.1NVD Advisory· Published Apr 10, 2025· Updated Apr 23, 2026

CVE-2025-32202

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Brian Batt - elearningfreak.com Insert or Embed Articulate Content into WordPress insert-or-embed-articulate-content-into-wordpress allows Upload a Web Shell to a Web Server.This issue affects Insert or Embed Articulate Content into WordPress: from n/a through <= 4.3000000025.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Insert Or Embed Articulate Content Into Wordpressinferred
Range: <=4.3000000025
Package: https://wordpress.org/plugins/insert-or-embed-articulate-content-into-wordpress
Elearningfreak/Insert Or Embed Articulate Contentllm-fuzzy
Range: <= 4.3000000025

Patches

Vulnerability mechanics

References

patchstack.com/database/Wordpress/Plugin/insert-or-embed-articulate-content-into-wordpress/vulnerability/wordpress-insert-or-embed-articulate-content-into-wordpress-plugin-4-3000000025-arbitrary-file-upload-vulnerabilitynvd

News mentions

No linked articles in our index yet.

cvss	0.591
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000