CVE-2025-32202
Insert or Embed Articulate Content into WordPress
Minimum safe version
4.3000000026
Update to 4.3000000026 or later to address 16 fixable vulnerabilities
Freemius SDK <= 2.4.2 - Missing Authorization Checks
CVE-2024-5630
WordPress Insert or Embed Articulate Content into WordPress Plugin <= 4.3000000023 is vulnerable to Content Injection
CVE-2024-0757
WordPress Insert or Embed Articulate Content into WordPress Plugin <= 4.3000000021 is vulnerable to Cross Site Scripting (XSS)
WordPress Insert or Embed Articulate Content into WordPress Plugin <= 4.3000000020 is vulnerable to Cross Site Scripting (XSS)
Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Insert or Embed Articulate Content into WordPress plugin <= 4.2999 - Authenticated Arbitrary Folder Deletion and Rename
Insert or Embed Articulate Content into WordPress plugin <= 4.2998 - Authenticated Remote Code Execution (RCE) vulnerability
WordPress Insert or Embed Articulate Content into WordPress plugin <= 4.3000000015 - Sensitive Information Disclosure vulnerability
WordPress Insert or Embed Articulate Content into WordPress plugin <= 4.3000000015 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability
CVE-2019-15649
CVE-2019-15648