Authorization Bypass in ContentStudio Plugin for WordPress

CVE-2023-0556

Summary

The ContentStudio plugin for WordPress is susceptible to an authorization bypass due to a lack of capability checks on certain functions. This vulnerability affects all versions up to and including 1.2.5, allowing unauthenticated attackers to access sensitive blog metadata. Specifically, attackers can retrieve the plugin's contentstudio_token through the cstu_get_metadata function, which can lead to unauthorized interactions with the plugin, such as creating or updating posts, prior to the implementation of additional security measures in later versions.

References