Contentstudio
Approved changes feed: RSS · Atom
cpe:2.3:a:contentstudio:contentstudio:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Contentstudio (c0df9a23-e0ad-5783-bf5e-57ec3dbcb6ca) |
|---|---|
| Product | Contentstudio (9c3ffb08-6f2a-52fc-a8f8-85212a872735) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-67910 |
vulnerable | 2026-06-08 07:41:20.575697 |
WordPress Contentstudio plugin <= 1.3.7 - Arbitrary File Upload vulnerability
CRITICAL (9.1)
Unrestricted Upload of File with Dangerous Type vulnerability in contentstudio Contentstudio contentstudio allows Upload a Web Shell to a Web Server.This issue affects Contentstudio: from n/a through <= 1.3.7.
Published: 2026-01-08T09:17:44.388Z
Updated: 2026-04-28T16:14:22.923Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-49990 |
vulnerable | 2026-06-08 07:29:15.200133 |
WordPress ContentStudio plugin <= 1.3.7 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in contentstudio Contentstudio contentstudio allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Contentstudio: from n/a through <= 1.3.7.
Published: 2025-06-20T15:04:08.230Z
Updated: 2026-04-28T16:13:14.946Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-47692 |
vulnerable | 2026-06-08 07:27:14.735116 |
WordPress ContentStudio plugin <= 1.3.5 - Broken Access Control Vulnerability
MEDIUM (4.3)
Missing Authorization vulnerability in contentstudio Contentstudio contentstudio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contentstudio: from n/a through <= 1.3.5.
Published: 2025-05-07T14:20:57.916Z
Updated: 2026-04-28T16:12:50.334Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13144 |
vulnerable | 2026-06-08 07:04:31.689011 |
ContentStudio <= 1.3.7 - Cross-Site Request Forgery to Settings Update
MEDIUM (4.3)
The ContentStudio plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.7. This is due to missing or insufficient nonce validation on the add_cstu_settings function. This makes it possible for unauthenticated attackers to modify plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Published: 2025-12-05T05:31:20.105Z
Updated: 2026-04-08T16:33:09.655Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12181 |
vulnerable | 2026-06-08 07:04:29.795963 |
ContentStudio <= 1.3.7 - Authenticated (Author+) Arbitrary File Upload
HIGH (8.8)
The ContentStudio plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the cstu_update_post() function in all versions up to, and including, 1.3.7. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. CVE-2025-67910 is likely a duplicate of this.
Published: 2025-12-05T05:31:24.852Z
Updated: 2026-04-08T16:55:23.744Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0558 |
vulnerable | 2026-06-08 05:52:31.921565 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0557 |
vulnerable | 2026-06-08 05:52:31.921139 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0556 |
vulnerable | 2026-06-08 05:52:31.919148 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.