Lucene search
+L

38 matches found

NVD
NVD
added 6 days ago9 views

CVE-2026-15979

The Content Egg – Affiliate Product Importer & Price Comparison plugin for WordPress is vulnerable to Arbitrary File Deletion via Path Traversal in versions up to and including 11.3.0. This is due to insufficient validation of the 'imgfile' field within the ceggdata post metadata: the value passe...

8.1CVSS0.00773EPSS
SaveExploits0References10
ATTACKERKB
ATTACKERKB
added 6 days ago10 views

CVE-2026-15979

The Content Egg – Affiliate Product Importer & Price Comparison plugin for WordPress is vulnerable to Arbitrary File Deletion via Path Traversal in versions up to and including 11.3.0. This is due to insufficient validation of the 'imgfile' field within the ceggdata post metadata: the value passe...

8.1CVSS6.5AI score0.00773EPSS
SaveExploits0References11
EUVD
EUVD
added 6 days ago6 views

EUVD-2026-53341

The Content Egg – Affiliate Product Importer & Price Comparison plugin for WordPress is vulnerable to Arbitrary File Deletion via Path Traversal in versions up to and including 11.3.0. This is due to insufficient validation of the 'imgfile' field within the ceggdata post metadata: the value passe...

8.1CVSS6.5AI score0.00773EPSS
SaveExploits0References10
Cvelist
Cvelist
added 6 days ago28 views

CVE-2026-15979 Content Egg <= 11.3.0 - Authenticated (Author+) Arbitrary File Deletion

The Content Egg – Affiliate Product Importer & Price Comparison plugin for WordPress is vulnerable to Arbitrary File Deletion via Path Traversal in versions up to and including 11.3.0. This is due to insufficient validation of the 'imgfile' field within the ceggdata post metadata: the value passe...

8.1CVSS0.00773EPSS
SaveExploits0References10
RedhatCVE
RedhatCVE
added 2026/01/09 10:44 a.m.8 views

CVE-2022-0428

The Content Egg WordPress plugin before 5.3.0 does not sanitise and escape the page parameter before outputting back in an attribute in the Autoblogging admin dashboard, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.5AI score0.00788EPSS
SaveExploits2References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.21 views

EUVD-2022-30526

Malicious code in bioql PyPI...

8.8CVSS8.5AI score0.00284EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.8 views

EUVD-2025-24747

Malicious code in bioql PyPI...

7.2CVSS6.5AI score0.00467EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/16 11:25 a.m.9 views

CVE-2025-47536

Deserialization of Untrusted Data vulnerability in keywordrush Content Egg content-egg allows Object Injection.This issue affects Content Egg: from n/a through = 7.0.0...

7.2CVSS5.9AI score0.00467EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/14 11:15 a.m.11 views

CVE-2025-47536

Deserialization of Untrusted Data vulnerability in keywordrush Content Egg content-egg allows Object Injection.This issue affects Content Egg: from n/a through = 7.0.0...

7.2CVSS0.00467EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/14 10:34 a.m.23 views

CVE-2025-47536

The CVE CVE-2025-47536 concerns WordPress Content Egg plugin (v

7.2CVSS5.9AI score0.00467EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/14 10:34 a.m.5 views

CVE-2025-47536 WordPress Content Egg plugin <= 7.0.0 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in keywordrush Content Egg content-egg allows Object Injection.This issue affects Content Egg: from n/a through = 7.0.0...

7.2CVSS5.2AI score0.00467EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/14 10:34 a.m.19 views

CVE-2025-47536 WordPress Content Egg plugin <= 7.0.0 - PHP Object Injection Vulnerability

Deserialization of Untrusted Data vulnerability in keywordrush Content Egg content-egg allows Object Injection.This issue affects Content Egg: from n/a through = 7.0.0...

7.2CVSS0.00467EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/08/14 12:0 a.m.8 views

PT-2025-33170 · Unknown · Content Egg

Name of the Vulnerable Software and Affected Versions: Content Egg versions n/a through 7.0.0 Description: Deserialization of untrusted data in keywordrush Content Egg allows object injection. Recommendations: At the moment, there is no information about a newer version that contains a fix for th...

7.2CVSS6.9AI score0.00467EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/08/14 12:0 a.m.8 views

WordPress plugin Content Egg 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

7.2CVSS6.8AI score0.00467EPSS
SaveExploits0References1
OSV
OSV
added 2022/11/03 8:15 p.m.9 views

CVE-2022-25952

Cross-Site Request Forgery CSRF vulnerability in Keywordrush Content Egg plugin = 5.4.0 on WordPress...

8.8CVSS5.8AI score0.00284EPSS
SaveExploits0References2
NVD
NVD
added 2022/11/03 8:15 p.m.34 views

CVE-2022-25952

Cross-Site Request Forgery CSRF vulnerability in Keywordrush Content Egg plugin = 5.4.0 on WordPress...

8.8CVSS0.00284EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2022/11/03 7:35 p.m.6 views

CVE-2022-25952 WordPress Content Egg plugin <= 5.4.0 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Keywordrush Content Egg plugin = 5.4.0 on WordPress...

4.3CVSS5.8AI score0.00284EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/11/03 7:35 p.m.40 views

CVE-2022-25952 WordPress Content Egg plugin <= 5.4.0 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Keywordrush Content Egg plugin = 5.4.0 on WordPress...

4.3CVSS9AI score0.00284EPSS
SaveExploits0References2
CVE
CVE
added 2022/11/03 7:35 p.m.65 views

CVE-2022-25952

CVE-2022-25952 describes a Cross‑Site Request Forgery (CSRF) in the WordPress plugin Keywordrush Content Egg / Content Egg up to version 5.4.0 . The flaw affects the plugin’s ability to verify CSRF tokens in certain actions, enabling an authenticated attacker to trick an admin into performing uni...

8.8CVSS6.5AI score0.00284EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2022/11/03 12:0 a.m.13 views

PT-2022-17617 · Unknown · Keywordrush Content Egg

Name of the Vulnerable Software and Affected Versions: Keywordrush Content Egg plugin versions prior to 5.4.0 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a...

8.8CVSS8.5AI score0.00284EPSS
SaveExploits0References4
Rows per page
Query Builder