CVE-2023-0558 - CVE House
Back to Database
Status published High CVE-2023-0558

ContentStudio <= 1.2.5 - Authorization Bypass

Vulnerability Description

The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to an unsecure token check that is susceptible to type juggling in versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to execute functions intended for use by users with proper API keys.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-0558

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Chloe Chamberland

References

More from contentstudio

View All →
CVE-2025-67910
WordPress Contentstudio plugin <= 1.3.7 - Arbitrary File Upload vulnerability
Critical 9.1
CVE-2025-49990
WordPress ContentStudio plugin <= 1.3.7 - Broken Access Control vulnerability
Medium 5.3
CVE-2025-47692
WordPress ContentStudio plugin <= 1.3.5 - Broken Access Control Vulnerability
Medium 4.3
CVE-2025-13144
ContentStudio <= 1.3.7 - Cross-Site Request Forgery to Settings Update
Medium 4.3
CVE-2025-12181
ContentStudio <= 1.3.7 - Authenticated (Author+) Arbitrary File Upload
High 8.8

Affected Vendor

contentstudio

View all reports →

Affected Software

ContentStudio
Vulnerable Versions:
0

Timeline

Official Publish: January 27th, 2023
Last Modified: April 8th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Weaknesses (CWE)

CWE-639

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1078 Valid Accounts
Persistence
T1213 Data from Information Repositories
Collection
T1021 Remote Services
Lateral Movement
T1098 Account Manipulation
Privilege Escalation