WordPress security by component

Contentstudio

Plugin description

Contentstudio is a WordPress component with 8 published CVE records in this archive. The latest tracked vulnerability was published Jan 08, 2026; the highest CVE/CNA score is 9.8.

Plugin slug: contentstudio

Latest vulnerability

CVE-2025-67910: Contentstudio: Dangerous file upload

Contentstudio is affected by dangerous file upload. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.

PublishedJan 08, 2026

Safe version guidanceSee mitigation notes

		Safe version
Jan 08, 2026	CVE-2025-67910 Contentstudio: Dangerous file upload Contentstudio is affected by dangerous file upload. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.	See mitigation notes	CVE9.1 NVDPending
Dec 05, 2025	CVE-2025-13144 ContentStudio: Cross-site request forgery ContentStudio is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.	See mitigation notes	CVE4.3 NVDPending
Dec 05, 2025	CVE-2025-12181 ContentStudio: Dangerous file upload ContentStudio is affected by dangerous file upload. Exploitation requires at least author-level access. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.	See mitigation notes	CVE8.8 NVDPending
Jun 20, 2025	CVE-2025-49990 Contentstudio: A security weakness Contentstudio is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE5.3 NVDPending
May 07, 2025	CVE-2025-47692 Contentstudio: A security weakness Contentstudio is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE4.3 NVDPending
Jan 27, 2023	CVE-2023-0558 ContentStudio: A security weakness ContentStudio is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE8.2 NVD9.8
Jan 27, 2023	CVE-2023-0557 ContentStudio: Sensitive information exposure ContentStudio is affected by sensitive information exposure. The vulnerable path is reachable without authentication. Successful exploitation can disclose data that should not be available to the caller.	See mitigation notes	CVE7.5 NVD5.3
Jan 27, 2023	CVE-2023-0556 ContentStudio: A security weakness ContentStudio is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE9.8 NVD6.5