Skip to content
OpenAdvisories

Vendor

contentstudio

8 known vulnerabilities.

Products

3 results · Clear filters · Feed

  • Medium 4.3

    ContentStudio <= 1.3.7 - Cross-Site Request Forgery to Settings Update

    The ContentStudio plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3.7. This is due to missing or insufficient nonce validation on the add_cstu_settings function. This makes it possible for unauthenticat…

  • Medium 5.3

    WordPress ContentStudio plugin <= 1.3.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in contentstudio Contentstudio contentstudio allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Contentstudio: from n/a through <= 1.3.7.

  • Medium 4.3

    WordPress ContentStudio plugin <= 1.3.5 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in contentstudio Contentstudio contentstudio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contentstudio: from n/a through <= 1.3.5.