Insert or Embed Articulate Content into WordPress

Insert or Embed Articulate Content into WordPress has 11 disclosed vulnerabilities in the WordSec catalog, reported between 2019 and 2026; 10 are fixed and 1 remains unpatched as of October 2026. Their average CVSS score is 7.4, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 6 high. 2019 was the busiest year with 3 disclosures.

The most common weakness is Unrestricted Upload Of File With Dangerous Type, behind 5 of the records (45%). Other recurring categories include Cross-Site Scripting, Missing Authorization.

10 of the records (91%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.

7 independent researchers contributed these findings, most of them (3) reported by Dmitrii Ignatyev.

Strategic Overview

Avg CVSSHigh

7.4/ 10

Patch Coverage91%

Open

Fixed

Get automatic notifications for all Insert or Embed Articulate Content into WordPress vulnerabilities before they are exploited.

Most severe open issueCVSS 7.2CVE-2026-16060

Insert or Embed Articulate Content into WordPress <= 4.3000000027 - Authenticated (Editor+) Arbitrary File Upload

Read the full analysis

Vulnerability Records

11 records


2026-09-10 00:00	Insert or Embed Articulate Content into WordPress < 4.3000000025 - Authenticated (Author+) Arbitrary File Upload Insert or Embed Articulate Content… < 4.3000000025	`CVE-2024-0757`	8.8 High	Dmitrii Ignatyev	Yes
2026-07-24 00:00	Insert or Embed Articulate Content into WordPress <= 4.3000000027 - Authenticated (Editor+) Arbitrary File Upload Insert or Embed Articulate Content… <= 4.3000000027	`CVE-2026-16060`	7.2 High	Yaswanth Reddy Sunkara	No
2025-04-08 00:00	Insert or Embed Articulate Content into WordPress <= 4.3000000025 - Authenticated (Editor+) Arbitrary File Upload Insert or Embed Articulate Content… <= 4.3000000025	`CVE-2025-32202`	7.2 High	Phan Trong Quan	Yes
2024-06-24 00:00	Insert or Embed Articulate Content into WordPress <= 4.3000000023 - Authenticated (Author+) Arbitrary File Upload Insert or Embed Articulate Content… <= 4.3000000023	`CVE-2024-5630`	8.8 High	Dmitrii Ignatyev	Yes
2024-05-14 00:00	Insert or Embed Articulate Content into WordPress <= 4.3000000023 - Authenticated (Author+) Stored Cross-Site Scripting via Code Injection Insert or Embed Articulate Content… <= 4.3000000023	`CVE-2024-0756`	6.4 Medium	Dmitrii Ignatyev	Yes
2023-12-19 00:00	Insert or Embed Articulate Content into WordPress <= 4.3000000021 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode Insert or Embed Articulate Content… <= 4.3000000021	`CVE-2023-50824`	6.4 Medium	LVT-tholv2k	Yes
2023-07-18 00:00	Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get Insert or Embed Articulate Content… <= 4.3000000020	`CVE-2023-33999`	6.1 Medium	Rafie Muhammad	Yes
2022-03-04 00:00	Freemius SDK <= 2.4.2 - Missing Authorization Checks Insert or Embed Articulate Content… < 4.3000000016	`CVE-2022-4974`	6.3 Medium	Anonymous	Yes
2019-07-02 00:00	Insert or Embed Articulate Content into WordPress < 4.29991 - Directory Traversal Insert or Embed Articulate Content… < 4.29991	`CVE-2019-15648`	6.5 Medium	WPScanTeam	Yes
2019-06-11 00:00	Insert or Embed Articulate Content into WordPress < 4.2999 - Arbitrary File Upload Insert or Embed Articulate Content… < 4.2999	`CVE-2019-15649`	8.8 High	xulchibalraa	Yes

Showing 1–10 of 11 reports