Contentstudio Contentstudio
8 CVEs affecting Contentstudio Contentstudio. Latest disclosed: 2026-01-08. Critical: 2, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-0556 | Critical | 9.8 | 2023-01-27 | The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several functions in versions up to, and incl… |
CVE-2025-67910 | Critical | 9.1 | 2026-01-08 | Unrestricted Upload of File with Dangerous Type vulnerability in contentstudio Contentstudio contentstudio allows Upload a Web Shell to a Web Server.This issue… |
CVE-2025-12181 | High | 8.8 | 2025-12-05 | The ContentStudio plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the cstu_update_post() function in all ve… |
CVE-2023-0558 | High | 8.2 | 2023-01-27 | The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to an unsecure token check that is susceptible to type juggling in versions up… |
CVE-2023-0557 | High | 7.5 | 2023-01-27 | The ContentStudio plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.2.5. This could allow unauthenticate… |
CVE-2025-49990 | Medium | 5.3 | 2025-06-20 | Missing Authorization vulnerability in contentstudio Contentstudio contentstudio allows Accessing Functionality Not Properly Constrained by ACLs.This issue aff… |
CVE-2025-13144 | Medium | 4.3 | 2025-12-05 | The ContentStudio plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.7. This is due to missing or insuf… |
CVE-2025-47692 | Medium | 4.3 | 2025-05-07 | Missing Authorization vulnerability in contentstudio Contentstudio contentstudio allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |