withstudiocms vulnerabilities
7 published CVEs name withstudiocms among the affected products.
- 7Published CVEs7 of them scored
- 7Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-32638
StudioCMS REST getUsers Exposes Owner Account Records to Admin Tokens
withstudiocms · studiocms
Low2.7 - CVE-2026-32104
StudioCMS: IDOR in User Notification Preferences Allows Any Authenticated User to Modify Any User's Settings
withstudiocms · studiocms
Medium5.4 - CVE-2026-32106
StudioCMS: REST API Missing Rank Check Allows Admin to Create Peer Admin Accounts
withstudiocms · studiocms
Medium4.7 - CVE-2026-32103
StudioCMS: IDOR — Admin-to-Owner Account Takeover via Password Reset Link Generation
withstudiocms · studiocms
Medium6.8 - CVE-2026-30945
StudioCMS: IDOR — Arbitrary API Token Revocation Leading to Denial of Service
withstudiocms · studiocms
High7.1 - CVE-2026-30944
StudioCMS Affected by Privilege Escalation via Insecure API Token Generation
withstudiocms · studiocms
High8.8 - CVE-2026-24134
StudioCMS has an Authorization Bypass Through User-Controlled Key
withstudiocms · studiocms
Medium6.5