CVE-2023-0557
ContentStudio <= 1.2.5 - Information Exposure
CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
0th
The ContentStudio plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.2.5. This could allow unauthenticated attackers to obtain a nonce needed for the creation of posts.
| CWE | CWE-200 |
| Vendor | contentstudio |
| Product | contentstudio |
| Published | Jan 27, 2023 |
| Last Updated | Apr 8, 2026 |
Stay Ahead of the Next One
Get instant alerts for contentstudio contentstudio
Be the first to know when new high vulnerabilities affecting contentstudio contentstudio are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
contentstudio / ContentStudio
0 ≤ 1.2.5
References
wordfence.com: https://www.wordfence.com/threat-intel/vulnerabilities/id/62eb136f-3cb0-40dc-a154-015a7fa1077b?source=cve plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/browser/contentstudio/trunk/contentstudio-plugin.php#L709 plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2851006%40contentstudio%2Ftrunk&old=2844028%40contentstudio%2Ftrunk&sfp_email=&sfph_mail= wordfence.com: https://www.wordfence.com/threat-intel/vulnerabilities/id/62eb136f-3cb0-40dc-a154-015a7fa1077b
Credits
Chloe Chamberland