CVE-2024-5630 WordPress RCE via zip bypass upload
by HA_twck - Wednesday July 17, 2024 at 09:43 AM
#21
Thanks mannnnnn
Reply
#22
Thanks for sharing :cateat:
Reply
#23
very nice thanks
Reply
#24
thanks for your sharing mate
Reply
#25
thanks for sharing man !
Reply
#26
A very interesting exploit

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Buying/selling real IDs/documents is prohibited
Reply
#27
thank you for sharing brother
Reply
#28
thank you! Smile Smile Smile

thank you! Smile Smile Smile
Reply
#29
thanks for sharing

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Leeching | http://c66go4clkqodr7tdjfu76jztjs7w7d3fajdeypxn73v4ju3dt7g5yyyd.onion/Forum-Ban-Appeals if you feel this is incorrect.
Reply
#30
(Jul 17, 2024, 09:43 AM)HA_twck Wrote: The latest to come under the spotlight is the “Insert or Embed Articulate Content into WordPress” plugin, which is now flagged for a critical Remote Code Execution (RCE) vulnerability. This security loophole, tracked under CVE-2024-5630, jeopardizes websites by allowing arbitrary code execution through seemingly benign ZIP file uploads.

CVE:CVE-2024-5630
Plugin: Insert or Embed Articulate Content into WordPress < 4.3000000024
Critical:Very High

POC:



PS: I dont own source; only sharing for those who need.

Thanks for sharing!
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  Dokan Pro Unauthenticated SQL Injection POC | CVSS 10 Loki 41 3,610 37 minutes ago
Last Post: Xploitd
  {SECRET} DATABASE OF EXPLOITS lulagain 435 26,322 11 hours ago
Last Post: DirtyEra
  New Zer0 Day Wordpress A3g00n 81 3,319 Today, 03:06 AM
Last Post: DirtyEra
  Wordpress Elementor 3.11.6 Exploit - Full Takeover TheGoodlife 102 19,688 Yesterday, 06:45 AM
Last Post: eztocard
  new wordpress website takeover vuln (video + poc ) zinzeur 314 28,310 Apr 30, 2026, 03:54 PM
Last Post: baku

Forum Jump:


 Users browsing this forum: 1 Guest(s)