Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-0558

Опубликовано: 27 янв. 2023
Источник: nvd
CVSS3: 8.2
CVSS3: 9.8
EPSS Низкий

Описание

The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to an unsecure token check that is susceptible to type juggling in versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to execute functions intended for use by users with proper API keys.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:contentstudio:contentstudio:*:*:*:*:*:wordpress:*:*
Версия до 1.2.6 (исключая)

EPSS

Процентиль: 78%
0.01156
Низкий

8.2 High

CVSS3

9.8 Critical

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 9.8
github
около 3 лет назад

The ContentStudio plugin for WordPress is vulnerable to authorization bypass due to an unsecure token check that is susceptible to type juggling in versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to execute functions intended for use by users with proper API keys.

EPSS

Процентиль: 78%
0.01156
Низкий

8.2 High

CVSS3

9.8 Critical

CVSS3

Дефекты

NVD-CWE-noinfo