Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Vendor: keywordrush Clear all filters
TI-2026-85484 CVE-2026-119751 · GHSA-wxpj-24h4-8v79

Content Egg WordPress plugin leaks data from unpublished posts

Priority LOW 36

Content Egg plugin for WordPress before 12.1.0 contains a broken access control vulnerability that allows unauthenticated attackers to retrieve Content Egg product data from unpublished posts by calling the REST route PO…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00264 Published 2026-11-05 Fixed in 12.1.0 CWE-639
TI-2026-82936 CVE-2026-119087 · GHSA-jgh8-9xrh-qc6w

Content Egg lets authors create posts attributed to administrators

Priority LOW 19

The Content Egg – Affiliate Product Importer & Price Comparison plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 12.0.0 This is due to the plugin not properly verifying tha…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00222 Published 2026-10-30 No fix listed CWE-862
TI-2026-82935 CVE-2026-119059 · GHSA-65m9-fpqg-cx7w

Content Egg missing authorization lets contributors edit post meta

Priority LOW 19

The Content Egg plugin for WordPress is vulnerable to unauthorized modification of data due to a missing per-post capability check on the ajaxUpdateProducts() function in versions up to, and including, 12.0.0.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00204 Published 2026-10-30 No fix listed CWE-862
TI-2026-13381 CVE-2026-15979 · GHSA-f2px-gwpw-v7cp

Content Egg <= 11.3.0 - Authenticated (Author+) Arbitrary File Deletion

Priority LOW 38

The Content Egg – Affiliate Product Importer & Price Comparison plugin for WordPress is vulnerable to Arbitrary File Deletion via Path Traversal in versions up to and including 11.3.0.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01219 Published 2026-08-05 No fix listed CWE-22
TI-2025-30033 CVE-2025-47536 · GHSA-mj6j-xrj4-v396

WordPress Content Egg plugin <= 7.0.0 - PHP Object Injection Vulnerability

Priority LOW 32

Deserialization of Untrusted Data vulnerability in keywordrush Content Egg content-egg allows Object Injection.This issue affects Content Egg: from n/a through <= 7.0.0.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0051 Published 2025-08-14 No fix listed CWE-502
TI-2022-00352 CVE-2022-0428 · GHSA-g7r4-c4q3-g2pj

Content Egg < 5.3.0 - Reflected Cross-Site Scripting

Priority LOW 29

The Content Egg WordPress plugin before 5.3.0 does not sanitise and escape the page parameter before outputting back in an attribute in the Autoblogging admin dashboard, leading to a Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-05-02 Fixed in 5.3.0 CWE-79