Authorization Bypass in ContentStudio Plugin for WordPress

CVE-2023-0558

Summary

The ContentStudio plugin for WordPress suffers from an authorization bypass vulnerability, allowing unauthenticated attackers to gain access to functionalities that are intended for authenticated users. This vulnerability arises from an insecure token validation mechanism susceptible to type juggling, which can be exploited in all versions up to and including 1.2.5. As a result, attackers may execute functions typically reserved for users with valid API keys, possibly leading to unauthorized data manipulation or other malicious actions.

References