Contentstudio - vulnerabilities (CVEs)

8 CVEs in 1 products, 0 in the last 30 days, newest from 2026-01-08.

Products

• Contentstudio - 8 CVEs

Newest CVEs of Contentstudio

• CVE-2025-67910 - CVSS 9.1 (critical), 2026-01-08: Unrestricted Upload of File with Dangerous Type vulnerability in contentstudio Contentstudio contentstudio allows Upload a Web Shell to a Web Server.This…
• CVE-2025-13144 - CVSS 4.3 (medium), 2025-12-05: The ContentStudio plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.7. This is due to missing or…
• CVE-2025-12181 - CVSS 8.8 (high), 2025-12-05: The ContentStudio plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the cstu_update_post() function in all…
• CVE-2025-49990 - CVSS 5.3 (medium), 2025-06-20: Missing Authorization vulnerability in contentstudio Contentstudio contentstudio allows Accessing Functionality Not Properly Constrained by ACLs.This issue…
• CVE-2025-47692 - CVSS 4.3 (medium), 2025-05-07: Missing Authorization vulnerability in contentstudio Contentstudio contentstudio allows Exploiting Incorrectly Configured Access Control Security Levels.This…
• CVE-2023-0556 - CVSS 9.8 (critical), 2023-01-27: The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several functions in versions up to, and…
• CVE-2023-0558 - CVSS 9.8 (critical), 2023-01-27: The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to an unsecure token check that is susceptible to type juggling in versions…
• CVE-2023-0557 - CVSS 7.5 (high), 2023-01-27: The ContentStudio plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.2.5. This could allow…