CVE-2024-5630 WordPress RCE via zip bypass upload
by HA_twck - Wednesday July 17, 2024 at 09:43 AM
#1
The latest to come under the spotlight is the “Insert or Embed Articulate Content into WordPress” plugin, which is now flagged for a critical Remote Code Execution (RCE) vulnerability. This security loophole, tracked under CVE-2024-5630, jeopardizes websites by allowing arbitrary code execution through seemingly benign ZIP file uploads.

CVE:CVE-2024-5630
Plugin: Insert or Embed Articulate Content into WordPress < 4.3000000024
Critical:Very High

POC:

Hidden Content
You must register or login to view this content.

PS: I dont own source; only sharing for those who need.
Reply
#2
oh grat thanks for it

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.
Reply
#3
Interesting, thank you!
Reply
#4
find the WordPress CVE-2024-5630 info, but not find the poc to modify,..

(Jul 17, 2024, 09:43 AM)HA_twck Wrote: Coolsecurity loophole, tracked under CVE-2024-5630, jeopardizes websites by allowing arbitrary code execution through seemingly benign ZIP file uploads.

CVE:CVE-2024-5630
Plugin: Insert or Embed Articulate Content into WordPress < 4.3000000024
Critical:Very High

POC:



PS: I dont own source; only sharing for those who need.


Cool
important:  zip file upload
Reply
#5
wow thanks for sharing
Reply
#6
let me see dude thanks
Reply
#7
great to vulnerability i need to trying POC.
Reply
#8
Thanks man , sharing...
Reply
#9
great poc , will try
Reply
#10
good job brooo....
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  Google Dorks for finding SQL injection vulnerabilities and other security issues 1yush 64 2,787 Apr 24, 2026, 05:17 AM
Last Post: p2wnz_bontensec
  CVE-2024-32002 RCE PoC HA_twck 1 372 Apr 24, 2026, 05:13 AM
Last Post: p2wnz_bontensec
  GeoServer: Full Exploit + Mass Scanning Utility Loki 26 2,758 Apr 24, 2026, 04:56 AM
Last Post: p2wnz_bontensec
  New Zer0 Day Wordpress A3g00n 78 2,765 Apr 24, 2026, 04:54 AM
Last Post: p2wnz_bontensec
  {SECRET} DATABASE OF EXPLOITS lulagain 428 24,398 Apr 24, 2026, 04:53 AM
Last Post: p2wnz_bontensec

Forum Jump:


 Users browsing this forum: 1 Guest(s)