Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: contentstudio Component: Contentstudio Clear all filters
TI-2023-00529 CVE-2023-0558 · GHSA-42mm-238w-2fxw

ContentStudio <= 1.2.5 - Authorization Bypass

Priority MEDIUM 44

The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to an unsecure token check that is susceptible to type juggling in versions up to, and including, 1.2.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00902 Published 2023-01-27 No fix listed CWE-639
TI-2023-00528 CVE-2023-0557 · GHSA-frcq-7vxc-3px2

ContentStudio <= 1.2.5 - Information Exposure

Priority MEDIUM 41

The ContentStudio plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.2.5.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00932 Published 2023-01-27 No fix listed CWE-200
TI-2023-00527 CVE-2023-0556 · GHSA-h8vw-7x98-j7c4

ContentStudio <= 1.2.5 - Missing Authorization

Priority MEDIUM 51

The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several functions in versions up to, and including, 1.2.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00979 Published 2023-01-27 No fix listed CWE-862