CVE-2025-12181

Name of the Vulnerable Software and Affected Versions ContentStudio plugin for WordPress versions through 1.3.7

Description The ContentStudio plugin for WordPress is susceptible to arbitrary file uploads because of a lack of file type validation within the cstu update post() function. This allows authenticated attackers with Author-level access or higher to upload arbitrary files to the affected server, potentially leading to remote code execution.

Recommendations Update the ContentStudio plugin to a version newer than 1.3.7.