Read the docs

contentstudio

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

contentstudio records in CISA KEV

No contentstudio vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Contentstudio 3 records MEDIUM

Records

3 records in Contentstudio · all components

TI-2023-00527 CVE-2023-0556 · GHSA-h8vw-7x98-j7c4

ContentStudio <= 1.2.5 - Missing Authorization

Priority MEDIUM 51

The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several functions in versions up to, and including, 1.2.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00979 Published 2023-01-27 No fix listed CWE-862
TI-2023-00529 CVE-2023-0558 · GHSA-42mm-238w-2fxw

ContentStudio <= 1.2.5 - Authorization Bypass

Priority MEDIUM 44

The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to an unsecure token check that is susceptible to type juggling in versions up to, and including, 1.2.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00902 Published 2023-01-27 No fix listed CWE-639
TI-2023-00528 CVE-2023-0557 · GHSA-frcq-7vxc-3px2

ContentStudio <= 1.2.5 - Information Exposure

Priority MEDIUM 41

The ContentStudio plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.2.5.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00932 Published 2023-01-27 No fix listed CWE-200
Open these records in search →