keywordrush Content Egg vulnerabilities

Latest keywordrush Content Egg CVEs

Newest publication first

1. CVE-2026-96832 WordPress Content Egg plugin <= 6.3.1 - PHP Object Injection vulnerability

   Published 2026-09-30

   High·CVSS 7.2 EPSS 0.36%

   Shop manager PHP Object Injection in Content Egg <= 6.3.1 versions.

2. CVE-2025-47536 WordPress Content Egg plugin <= 7.0.0 - PHP Object Injection Vulnerability

   Published 2025-08-14

   High·CVSS 7.2 EPSS 0.51%

   Deserialization of Untrusted Data vulnerability in keywordrush Content Egg content-egg allows Object Injection.This issue affects Content Egg: from n/a through <= 7.0.0.

3. CVE-2022-25952 WordPress Content Egg plugin <= 5.4.0 - Cross-Site Request Forgery (CSRF) vulnerability

   Published 2022-11-03

   High·CVSS 8.8 EPSS 0.38%

   Cross-Site Request Forgery (CSRF) vulnerability in Keywordrush Content Egg plugin <= 5.4.0 on WordPress.

4. CVE-2022-0428 Content Egg < 5.3.0 - Reflected Cross-Site Scripting

   Published 2022-05-02

   Medium·CVSS 6.1 EPSS 0.80%

   The Content Egg WordPress plugin before 5.3.0 does not sanitise and escape the page parameter before outputting back in an attribute in the Autoblogging admin dashboard, leading to a Reflected Cross-Site Scripting

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.