CVE-2023-0557CWE-200

ContentStudio <= 1.2.5 - Information Exposure

High · published January 27, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
59.5
In the wild
Unconfirmed
What it is

The ContentStudio plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.2.5. This could allow unauthenticated attackers to obtain a nonce needed for the creation of posts.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00906 · 59.5th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2023-01-27T21:09Z
EPSS history
Timeline
  • 27 JAN 21:09Z
    ContentStudio <= 1.2.5 - Information Exposure
    cvelistv5