CVE-2023-0558

High

Description

The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to an unsecure token check that is susceptible to type juggling in versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to execute functions intended for use by users with proper API keys.

SeverityHigh

CVSS8.2

Exploit probability—

Product

Contentstudio

PublishedJan 27, 2023

First seenJan 27, 2023

Weakness typeCWE-639Authorization bypass through user-controlled key

How to fix

Update

contentstudio contentstudio1.2.6 or later

Affected products

Product	Affected versions	Fixed in
contentstudio contentstudio	v < 1.2.6	1.2.6

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.