Lucene search

K
wpvulndbWpvulndbWPVDB-ID:831DDA18-0D03-4AC7-982A-B831E2D8C9B5
HistoryJan 06, 2023 - 12:00 a.m.

ContentStudio < 1.2.6 - Unauthorised Function Calls

2023-01-0600:00:00
wpscan.com
7
contentstudio
plugin
unauthorised
function calls
metadata
token
authentication

EPSS

0.001

Percentile

41.7%

The plugin does not have authorisation checks in various functions, which could allow unauthenticated users to retrieve arbitrary metadata, including the plugin’s token used in other actions like when creating a post

EPSS

0.001

Percentile

41.7%

Related for WPVDB-ID:831DDA18-0D03-4AC7-982A-B831E2D8C9B5