Vulnerability Description
The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to an unsecure token check that is susceptible to type juggling in versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to execute functions intended for use by users with proper API keys.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Contentstudio | Contentstudio | < 1.2.6 |
Related Weaknesses (CWE)
References
- https://plugins.trac.wordpress.org/browser/contentstudio/trunk/contentstudio-pluExploitRelease NotesThird Party Advisory
- https://www.wordfence.com/threat-intel/vulnerabilities/id/c31828dc-ef94-4895-839Third Party Advisory
- https://plugins.trac.wordpress.org/browser/contentstudio/trunk/contentstudio-pluExploitRelease NotesThird Party Advisory
- https://www.wordfence.com/threat-intel/vulnerabilities/id/c31828dc-ef94-4895-839Third Party Advisory
FAQ
What is CVE-2023-0558?
CVE-2023-0558 is a vulnerability with a CVSS score of 8.2 (HIGH). The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to an unsecure token check that is susceptible to type juggling in versions up to, and including, 1.2.5. This makes it ...
How severe is CVE-2023-0558?
CVE-2023-0558 has been rated HIGH with a CVSS base score of 8.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-0558?
Check the references section above for vendor advisories and patch information. Affected products include: Contentstudio Contentstudio.