keywordrush vulnerabilities

Products

• Content Egg 4
• Content Egg – Affiliate Product Importer & Price Comparison 4
• Content Egg (WordPress plugin) 1

Latest keywordrush CVEs

Newest publication first

1. CVE-2026-119751 Content Egg WordPress Plugin < 12.1.0 Unauthenticated Information Disclosure via render-blocks

   Published 2026-11-05

   Medium·CVSS 6.9 EPSS 0.26%

   Content Egg plugin for WordPress before 12.1.0 contains a broken access control vulnerability that allows unauthenticated attackers to retrieve Content Egg product data from unpublished posts by calling the REST route POST /wp-json/content-egg/v1/render-blocks, whose permission_c...

2. CVE-2026-119087 Content Egg <= 12.0.0 - Missing Authorization to Authenticated (Author+) Administrator-Authored Post Creation via 'preset_id' Parameter

   Published 2026-10-30

   Medium·CVSS 4.3 EPSS 0.22%

   The Content Egg – Affiliate Product Importer & Price Comparison plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 12.0.0 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it p...

3. CVE-2026-119059 Content Egg <= 12.0.0 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Meta Modification via 'post_id' Parameter via cegg_update_products AJAX Action

   Published 2026-10-30

   Medium·CVSS 4.3 EPSS 0.20%

   The Content Egg plugin for WordPress is vulnerable to unauthorized modification of data due to a missing per-post capability check on the ajaxUpdateProducts() function in versions up to, and including, 12.0.0. The handler verifies a static nonce ('contentegg_metabox') and the gen...

4. CVE-2026-96832 WordPress Content Egg plugin <= 6.3.1 - PHP Object Injection vulnerability

   Published 2026-09-30

   High·CVSS 7.2 EPSS 0.36%

   Shop manager PHP Object Injection in Content Egg <= 6.3.1 versions.

5. CVE-2026-15979 Content Egg <= 11.3.0 - Authenticated (Author+) Arbitrary File Deletion

   Published 2026-08-05

   High·CVSS 8.1 EPSS 1.2%

   The Content Egg – Affiliate Product Importer & Price Comparison plugin for WordPress is vulnerable to Arbitrary File Deletion via Path Traversal in versions up to and including 11.3.0. This is due to insufficient validation of the 'img_file' field within the cegg_data post metada...

6. CVE-2025-47536 WordPress Content Egg plugin <= 7.0.0 - PHP Object Injection Vulnerability

   Published 2025-08-14

   High·CVSS 7.2 EPSS 0.51%

   Deserialization of Untrusted Data vulnerability in keywordrush Content Egg content-egg allows Object Injection.This issue affects Content Egg: from n/a through <= 7.0.0.

7. CVE-2022-25952 WordPress Content Egg plugin <= 5.4.0 - Cross-Site Request Forgery (CSRF) vulnerability

   Published 2022-11-03

   High·CVSS 8.8 EPSS 0.38%

   Cross-Site Request Forgery (CSRF) vulnerability in Keywordrush Content Egg plugin <= 5.4.0 on WordPress.

8. CVE-2022-0428 Content Egg < 5.3.0 - Reflected Cross-Site Scripting

   Published 2022-05-02

   Medium·CVSS 6.1 EPSS 0.80%

   The Content Egg WordPress plugin before 5.3.0 does not sanitise and escape the page parameter before outputting back in an attribute in the Autoblogging admin dashboard, leading to a Reflected Cross-Site Scripting

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.