Contentstudio
Approved changes feed: RSS · Atom
cpe:2.3:a:contentstudio:contentstudio:*:*:*:*:*:wordpress:*:*part: a version: * update: *
| Vendor | Contentstudio (c0df9a23-e0ad-5783-bf5e-57ec3dbcb6ca) |
|---|---|
| Product | Contentstudio (9c3ffb08-6f2a-52fc-a8f8-85212a872735) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-0558 |
vulnerable | 2026-06-08 05:52:31.921684 |
ContentStudio <= 1.2.5 - Authorization Bypass
HIGH (8.2)
The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to an unsecure token check that is susceptible to type juggling in versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to execute functions intended for use by users with proper API keys.
Published: 2023-01-27T21:09:29.998Z
Updated: 2026-04-08T17:20:19.151Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0557 |
vulnerable | 2026-06-08 05:52:31.921187 |
ContentStudio <= 1.2.5 - Information Exposure
HIGH (7.5)
The ContentStudio plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.2.5. This could allow unauthenticated attackers to obtain a nonce needed for the creation of posts.
Published: 2023-01-27T21:09:08.771Z
Updated: 2026-04-08T16:57:10.912Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0556 |
vulnerable | 2026-06-08 05:52:31.920560 |
ContentStudio <= 1.2.5 - Missing Authorization
CRITICAL (9.8)
The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several functions in versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to obtain the blog metadata (via the function cstu_get_metadata) that includes the plugin's contentstudio_token. Knowing this token allows for other interactions with the plugin such as creating posts in versions prior to 1.2.5, which added other requirements to posting and updating.
Published: 2023-01-27T21:08:16.313Z
Updated: 2026-04-08T16:52:55.776Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.