CVE-2024-5630 WordPress RCE via zip bypass upload
by HA_twck - Wednesday July 17, 2024 at 09:43 AM
#1
The latest to come under the spotlight is the “Insert or Embed Articulate Content into WordPress” plugin, which is now flagged for a critical Remote Code Execution (RCE) vulnerability. This security loophole, tracked under CVE-2024-5630, jeopardizes websites by allowing arbitrary code execution through seemingly benign ZIP file uploads.

CVE:CVE-2024-5630
Plugin: Insert or Embed Articulate Content into WordPress < 4.3000000024
Critical:Very High

POC:

Hidden Content
You must register or login to view this content.

PS: I dont own source; only sharing for those who need.
Reply
#2
oh grat thanks for it

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.
Reply
#3
Interesting, thank you!
Reply
#4
find the WordPress CVE-2024-5630 info, but not find the poc to modify,..

(Jul 17, 2024, 09:43 AM)HA_twck Wrote: Coolsecurity loophole, tracked under CVE-2024-5630, jeopardizes websites by allowing arbitrary code execution through seemingly benign ZIP file uploads.

CVE:CVE-2024-5630
Plugin: Insert or Embed Articulate Content into WordPress < 4.3000000024
Critical:Very High

POC:



PS: I dont own source; only sharing for those who need.


Cool
important:  zip file upload
Reply
#5
wow thanks for sharing
Reply
#6
let me see dude thanks
Reply
#7
great to vulnerability i need to trying POC.
Reply
#8
Thanks man , sharing...
Reply
#9
great poc , will try
Reply
#10
good job brooo....
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  {SECRET} DATABASE OF EXPLOITS lulagain 435 26,307 9 hours ago
Last Post: DirtyEra
  New Zer0 Day Wordpress A3g00n 81 3,316 Today, 03:06 AM
Last Post: DirtyEra
  Wordpress Elementor 3.11.6 Exploit - Full Takeover TheGoodlife 102 19,680 Yesterday, 06:45 AM
Last Post: eztocard
  new wordpress website takeover vuln (video + poc ) zinzeur 314 28,307 Apr 30, 2026, 03:54 PM
Last Post: baku
  Google Dorks for finding SQL injection vulnerabilities and other security issues 1yush 66 3,159 Apr 29, 2026, 08:51 PM
Last Post: Yjuddur

Forum Jump:


 Users browsing this forum: 1 Guest(s)