Read the docs

contentstudio

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

contentstudio records in CISA KEV

No contentstudio vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Contentstudio 3 records MEDIUM

Records

8 records

TI-2023-00527 CVE-2023-0556 · GHSA-h8vw-7x98-j7c4

ContentStudio <= 1.2.5 - Missing Authorization

Priority MEDIUM 51

The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several functions in versions up to, and including, 1.2.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00979 Published 2023-01-27 No fix listed CWE-862
TI-2023-00529 CVE-2023-0558 · GHSA-42mm-238w-2fxw

ContentStudio <= 1.2.5 - Authorization Bypass

Priority MEDIUM 44

The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to an unsecure token check that is susceptible to type juggling in versions up to, and including, 1.2.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00902 Published 2023-01-27 No fix listed CWE-639
TI-2025-41519 CVE-2025-67910 · GHSA-xxh6-2g83-jp5x

WordPress Contentstudio plugin <= 1.3.7 - Arbitrary File Upload vulnerability

Priority MEDIUM 41

Unrestricted Upload of File with Dangerous Type vulnerability in contentstudio Contentstudio contentstudio allows Upload a Web Shell to a Web Server.This issue affects Contentstudio: from n/a through <= 1.3.7.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00407 Published 2026-01-08 No fix listed CWE-434
TI-2023-00528 CVE-2023-0557 · GHSA-frcq-7vxc-3px2

ContentStudio <= 1.2.5 - Information Exposure

Priority MEDIUM 41

The ContentStudio plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.2.5.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00932 Published 2023-01-27 No fix listed CWE-200
TI-2025-11168 CVE-2025-12181 · GHSA-rgjg-5fjw-rm4x

ContentStudio <= 1.3.7 - Authenticated (Author+) Arbitrary File Upload

Priority LOW 39

The ContentStudio plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the cstu_update_post() function in all versions up to, and including, 1.3.7.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0065 Published 2025-12-05 No fix listed CWE-434
TI-2025-31905 CVE-2025-49990 · GHSA-rfg2-v9fg-pr35

WordPress ContentStudio plugin <= 1.3.7 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in contentstudio Contentstudio contentstudio allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Contentstudio: from n/a through <= 1.3.7.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00293 Published 2025-06-20 No fix listed CWE-862
TI-2025-30189 CVE-2025-47692 · GHSA-cgcc-8vq7-798x

WordPress ContentStudio plugin <= 1.3.5 - Broken Access Control Vulnerability

Priority LOW 20

Missing Authorization vulnerability in contentstudio Contentstudio contentstudio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contentstudio: from n/a through <= 1.3.5.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00247 Published 2025-05-07 No fix listed CWE-862
Open these records in search →