CVE-2026-96832
- EPSS 0.37%
- Veröffentlicht 30.09.2026 12:27:43
- Zuletzt bearbeitet 30.09.2026 14:18:12
Shop manager PHP Object Injection in Content Egg <= 6.3.1 versions.
CVE-2026-15979
- EPSS 0.77%
- Veröffentlicht 05.08.2026 13:26:43
- Zuletzt bearbeitet 12.08.2026 21:00:37
The Content Egg – Affiliate Product Importer & Price Comparison plugin for WordPress is vulnerable to Arbitrary File Deletion via Path Traversal in versions up to and including 11.3.0. This is due to insufficient validation of the 'img_file' field wi...
CVE-2025-47536
- EPSS 0.47%
- Veröffentlicht 14.08.2025 10:34:25
- Zuletzt bearbeitet 23.04.2026 15:30:26
Deserialization of Untrusted Data vulnerability in keywordrush Content Egg content-egg allows Object Injection.This issue affects Content Egg: from n/a through <= 7.0.0.
CVE-2022-25952
- EPSS 0.3%
- Veröffentlicht 03.11.2022 20:15:28
- Zuletzt bearbeitet 21.11.2024 06:53:15
Cross-Site Request Forgery (CSRF) vulnerability in Keywordrush Content Egg plugin <= 5.4.0 on WordPress.
CVE-2022-0428
- EPSS 0.79%
- Veröffentlicht 02.05.2022 16:15:08
- Zuletzt bearbeitet 21.11.2024 06:38:36
The Content Egg WordPress plugin before 5.3.0 does not sanitise and escape the page parameter before outputting back in an attribute in the Autoblogging admin dashboard, leading to a Reflected Cross-Site Scripting