WordPress Insert or Embed Articulate Content Plugin Arbitrary File Upload Vulnerability

A vulnerability allowing unrestricted upload of files with dangerous types has been identified in the WordPress plugin 'Insert or Embed Articulate Content into WordPress', affecting versions through 4.3000000025. This vulnerability could be exploited to upload a web shell to the web server.

Impact

Exploitation of this vulnerability could lead to arbitrary file upload, allowing attackers to upload malicious files such as web shells, which could then be executed to gain further access to the website.

Remediation

Patchstack has issued a virtual patch to block attacks targeting this vulnerability until an official fix is available. Website owners can use Patchstack's services for vulnerability mitigation.