Skip to content
Founder-led WordPress incident response and care Request an assessment
3zerodigital Request a Website Assessment

Plugin security history

ContentStudio Vulnerability History & Security Timeline

The Wordfence Intelligence dataset currently contains 8 vulnerability records associated with ContentStudio, published between 2022 and 2025.

Dataset last synchronized: 2026-08-02 09:41:47 UTC

At a glance

Security Snapshot

8Total records
2Critical
3High
3Medium
0Low
0Informational
8Patched records
0Currently marked unpatched
2022-12-07First disclosure
2025-12-04Latest disclosure
7 of 8CVE coverage

Year-by-Year Timeline

YearRecordsRelative volume
202211 records
202333 records
202544 records

Severity Breakdown

SeverityRecordsShare
Critical225%
High337.5%
Medium337.5%

Vulnerability-Type Breakdown

Missing Authorization

5 records62.5%

First: 2022. Latest: 2025.

Information Disclosure

1 record12.5%

First: 2023. Latest: 2023.

CSRF

1 record12.5%

First: 2025. Latest: 2025.

Arbitrary File Upload

1 record12.5%

First: 2025. Latest: 2025.

Patch Status

Patched
8
Currently marked unpatched
0
Unknown status
0

Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.

Latest Known Patched Versions

  • 1.4.0
  • 1.3.7
  • 1.2.6
  • 1.1.9

Affected-Version History

Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.

Affected rangeVulnerabilityPublishedPatched versionSeverity
*-1.3.7ContentStudio <= 1.3.7 - Authenticated (Author+) Arbitrary File UploadDecember 4, 20251.4.0High
*-1.3.7ContentStudio <= 1.3.7 - Cross-Site Request Forgery to Settings UpdateDecember 4, 20251.4.0Medium
*-1.3.7ContentStudio <= 1.3.7 - Missing AuthorizationJune 19, 20251.4.0Medium
*-1.3.5ContentStudio <= 1.3.5 - Missing AuthorizationMay 7, 20251.3.7Medium
*-1.2.5ContentStudio <= 1.2.5 - Authorization BypassJanuary 27, 20231.2.6High
*-1.2.5ContentStudio <= 1.2.5 - Information ExposureJanuary 27, 20231.2.6High
*-1.2.5ContentStudio <= 1.2.5 - Missing AuthorizationJanuary 6, 20231.2.6Critical
*-1.1.8ContentStudio <= 1.1.8 - Missing AuthorizationDecember 7, 20221.1.9Critical

Selected source records

Latest Records

HighCVE-2025-12181

ContentStudio <= 1.3.7 - Authenticated (Author+) Arbitrary File Upload

Published: December 4, 2025

Affected versions
*-1.3.7
Patched versions
1.4.0
Original Wordfence record
MediumCVE-2025-13144

ContentStudio <= 1.3.7 - Cross-Site Request Forgery to Settings Update

Published: December 4, 2025

Affected versions
*-1.3.7
Patched versions
1.4.0
Original Wordfence record
MediumCVE-2025-49990

ContentStudio <= 1.3.7 - Missing Authorization

Published: June 19, 2025

Affected versions
*-1.3.7
Patched versions
1.4.0
Original Wordfence record
MediumCVE-2025-47692

ContentStudio <= 1.3.5 - Missing Authorization

Published: May 7, 2025

Affected versions
*-1.3.5
Patched versions
1.3.7
Original Wordfence record
HighCVE-2023-0557

ContentStudio <= 1.2.5 - Information Exposure

Published: January 27, 2023

Affected versions
*-1.2.5
Patched versions
1.2.6
Original Wordfence record
HighCVE-2023-0558

ContentStudio <= 1.2.5 - Authorization Bypass

Published: January 27, 2023

Affected versions
*-1.2.5
Patched versions
1.2.6
Original Wordfence record
CriticalCVE-2023-0556

ContentStudio <= 1.2.5 - Missing Authorization

Published: January 6, 2023

Affected versions
*-1.2.5
Patched versions
1.2.6
Original Wordfence record
Critical

ContentStudio <= 1.1.8 - Missing Authorization

Published: December 7, 2022

Affected versions
*-1.1.8
Patched versions
1.1.9
Original Wordfence record

Highest-Severity Records

CriticalCVE-2023-0556

ContentStudio <= 1.2.5 - Missing Authorization

Published: January 6, 2023

Affected versions
*-1.2.5
Patched versions
1.2.6
Original Wordfence record
Critical

ContentStudio <= 1.1.8 - Missing Authorization

Published: December 7, 2022

Affected versions
*-1.1.8
Patched versions
1.1.9
Original Wordfence record
HighCVE-2025-12181

ContentStudio <= 1.3.7 - Authenticated (Author+) Arbitrary File Upload

Published: December 4, 2025

Affected versions
*-1.3.7
Patched versions
1.4.0
Original Wordfence record
HighCVE-2023-0558

ContentStudio <= 1.2.5 - Authorization Bypass

Published: January 27, 2023

Affected versions
*-1.2.5
Patched versions
1.2.6
Original Wordfence record
HighCVE-2023-0557

ContentStudio <= 1.2.5 - Information Exposure

Published: January 27, 2023

Affected versions
*-1.2.5
Patched versions
1.2.6
Original Wordfence record
MediumCVE-2025-49990

ContentStudio <= 1.3.7 - Missing Authorization

Published: June 19, 2025

Affected versions
*-1.3.7
Patched versions
1.4.0
Original Wordfence record
MediumCVE-2025-13144

ContentStudio <= 1.3.7 - Cross-Site Request Forgery to Settings Update

Published: December 4, 2025

Affected versions
*-1.3.7
Patched versions
1.4.0
Original Wordfence record
MediumCVE-2025-47692

ContentStudio <= 1.3.5 - Missing Authorization

Published: May 7, 2025

Affected versions
*-1.3.5
Patched versions
1.3.7
Original Wordfence record

View all associated vulnerabilities

Need help reviewing an exposed WordPress website?

Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.

WordPress Malware RemovalWordPress Security MaintenanceContact 3Zero Digital

Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.

Data Source, Attribution and Methodology

This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.

Return to the Security History Directory