Cross-Site Request Forgery Vulnerability in ContentStudio Plugin for WordPress

CVE-2025-13144

What is CVE-2025-13144?

The ContentStudio plugin for WordPress is susceptible to a Cross-Site Request Forgery attack due to inadequate nonce validation within the add_cstu_settings function. This vulnerability allows unauthenticated individuals to alter plugin settings by tricking a site administrator into executing a forged action, such as clicking on a malicious link, potentially compromising the site’s integrity. It is recommended to update the plugin to a secure version and enforce proper nonce validation to mitigate such risks.

References