Contentstudio

8 CVEs across 1 Contentstudio products. Browse Contentstudio vulnerabilities, severities, and proof-of-concept exploits.

Contentstudio products with known CVEs

ProductCVEs
Contentstudio8
Contentstudio CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-67910Critical9.12026-01-08Unrestricted Upload of File with Dangerous Type vulnerability in contentstudio Contentstudio contentstudio allows Upload a Web Shell to a Web Server.This issue…
CVE-2025-13144Medium4.32025-12-05The ContentStudio plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.7. This is due to missing or insuf…
CVE-2025-12181High8.82025-12-05The ContentStudio plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the cstu_update_post() function in all ve…
CVE-2025-49990Medium5.32025-06-20Missing Authorization vulnerability in contentstudio Contentstudio contentstudio allows Accessing Functionality Not Properly Constrained by ACLs.This issue aff…
CVE-2025-47692Medium4.32025-05-07Missing Authorization vulnerability in contentstudio Contentstudio contentstudio allows Exploiting Incorrectly Configured Access Control Security Levels.This i…
CVE-2023-0558High8.22023-01-27The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to an unsecure token check that is susceptible to type juggling in versions up…
CVE-2023-0557High7.52023-01-27The ContentStudio plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.2.5. This could allow unauthenticate…
CVE-2023-0556Critical9.82023-01-27The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several functions in versions up to, and incl…