CVE-2024-5630 WordPress RCE via zip bypass upload
by HA_twck - Wednesday July 17, 2024 at 09:43 AM
#1
The latest to come under the spotlight is the “Insert or Embed Articulate Content into WordPress” plugin, which is now flagged for a critical Remote Code Execution (RCE) vulnerability. This security loophole, tracked under CVE-2024-5630, jeopardizes websites by allowing arbitrary code execution through seemingly benign ZIP file uploads.

CVE:CVE-2024-5630
Plugin: Insert or Embed Articulate Content into WordPress < 4.3000000024
Critical:Very High

POC:

Hidden Content
You must register or login to view this content.

PS: I dont own source; only sharing for those who need.
Reply
#2
oh grat thanks for it

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.
Reply
#3
Interesting, thank you!
Reply
#4
find the WordPress CVE-2024-5630 info, but not find the poc to modify,..

(Jul 17, 2024, 09:43 AM)HA_twck Wrote: Coolsecurity loophole, tracked under CVE-2024-5630, jeopardizes websites by allowing arbitrary code execution through seemingly benign ZIP file uploads.

CVE:CVE-2024-5630
Plugin: Insert or Embed Articulate Content into WordPress < 4.3000000024
Critical:Very High

POC:



PS: I dont own source; only sharing for those who need.


Cool
important:  zip file upload
Reply
#5
wow thanks for sharing
Reply
#6
let me see dude thanks
Reply
#7
great to vulnerability i need to trying POC.
Reply
#8
Thanks man , sharing...
Reply
#9
great poc , will try
Reply
#10
good job brooo....
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  {SECRET} DATABASE OF EXPLOITS lulagain 436 26,612 6 hours ago
Last Post: nobcoderfck
  [POC] Google OAuth "MultiLogin" endpoint 0-day Farfallaiero 108 13,753 6 hours ago
Last Post: nobcoderfck
  Ban Any Discord Exploit phineasfisherman 7 461 Yesterday, 10:16 AM
Last Post: sniperx86
  Dokan Pro Unauthenticated SQL Injection POC | CVSS 10 Loki 42 3,775 Yesterday, 08:39 AM
Last Post: d39ug
  New Zer0 Day Wordpress A3g00n 81 3,402 May 05, 2026, 03:06 AM
Last Post: DirtyEra

Forum Jump:


 Users browsing this forum: 1 Guest(s)