VULNERABILITY INTELLIGENCE

CVE-2023-0558

CVSS score8.2 HIGH

EPSS probability0.88%

CISA KEVNot currently listed

Published2023-01-27

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Description

The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to an unsecure token check that is susceptible to type juggling in versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to execute functions intended for use by users with proper API keys.

Weakness classification

security@wordfence.com: CWE-639
nvd@nist.gov: NVD-CWE-noinfo

Primary references

security@wordfence.com — Exploit, Release Notes, Third Party Advisory
security@wordfence.com — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Release Notes, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory