Design/Logic Flaw

The ContentStudio plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.2.5. This could allow unauthenticated attackers to obtain a nonce needed for the creation of posts...

Authorization

The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several functions in versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to obtain the blog metadata via the function cstugetmetadata that...

CVE-2023-0558 ContentStudio <= 1.2.5 - Authorization Bypass

The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to an unsecure token check that is susceptible to type juggling in versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to execute functions intended for use by users with proper...

CVE-2023-0558

The ContentStudio WordPress plugin is vulnerable to an authorization bypass caused by an insecure token check that is susceptible to type juggling in versions up to and including 1.2.5. This permits unauthenticated attackers to execute functions intended for users with valid API keys. Fixes noted...

CVE-2023-0557 ContentStudio <= 1.2.5 - Information Exposure

The ContentStudio plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.2.5. This could allow unauthenticated attackers to obtain a nonce needed for the creation of posts...

CVE-2023-0557

The CVE-2023-0557 entry concerns the ContentStudio WordPress plugin up to version 1.2.5, where an unauthenticated attacker can obtain a nonce used for post creation, exposing sensitive information. Multiple connected sources confirm this nonce-disclosure vulnerability affecting ContentStudio on W...

CVE-2023-0557 ContentStudio <= 1.2.5 - Information Exposure

The ContentStudio plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.2.5. This could allow unauthenticated attackers to obtain a nonce needed for the creation of posts...

CVE-2023-0556

The CVE-2023-0556 entry affects the ContentStudio WordPress plugin, with an authorization bypass due to missing capability checks in several functions through version 1.2.5. Unauthenticated attackers can retrieve blog metadata, including the contentstudio_token via cstu_get_metadata, enabling fur...

CVE-2023-0556 ContentStudio <= 1.2.5 - Missing Authorization

The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several functions in versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to obtain the blog metadata via the function cstugetmetadata that...

CVE-2023-0556

The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several functions in versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to obtain the blog metadata via the function cstugetmetadata that...

PT-2023-16360

Name of the Vulnerable Software and Affected Versions ContentStudio plugin for WordPress versions prior to 1.2.5 Description The issue is related to authorization bypass due to a missing capability check on several functions. This allows unauthenticated attackers to obtain blog metadata, includin...

WordPress plugin ContentStudio 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

ContentStudio < 1.2.6 - Authorisation Bypass

The plugin does not properly check for API keys, allowing unauthenticated users bypass of the authorisation in place via type juggling...

ContentStudio < 1.2.6 - Nonce Disclosure

The plugin discloses sensitive information to unauthenticated users, such as a nonce used to create a posts...

WordPress plugin ContentStudio 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

WordPress plugin ContentStudio 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

PT-2023-16361 · WordPress · Contentstudio

Name of the Vulnerable Software and Affected Versions: ContentStudio plugin for WordPress versions up to and including 1.2.5 Description: The issue allows unauthenticated attackers to obtain a nonce needed for the creation of posts, potentially exposing sensitive information. Recommendations: For...

PT-2023-16362 · WordPress · Contentstudio

Name of the Vulnerable Software and Affected Versions: ContentStudio plugin for WordPress version 1.2.5 and earlier Description: The issue is related to an authorization bypass due to an unsecure token check that is susceptible to type juggling. This allows unauthenticated attackers to execute...

ContentStudio < 1.2.6 - Unauthorised Function Calls

The plugin does not have authorisation checks in various functions, which could allow unauthenticated users to retrieve arbitrary metadata, including the plugin's token used in other actions like when creating a post...