EUVD-2026-89621

The Content Egg WordPress plugin before 11.9.0 does not verify that a user running its bulk content-import feature is authorized for the import preset they select, and switches to the preset author's identity before creating the resulting post, allowing users with contributor-level access and abo...

CVE-2026-92424

The Content Egg WordPress plugin prior to version 11.9.0 is vulnerable to a stored cross-site scripting (XSS) flaw. The bulk content-import feature fails to verify if a user is authorized for the selected import preset. During the process, the plugin switches to the preset author's identity to cr...