egg-scripts-CVE-2018-3786

egg-scripts 用于 egg 项目的部署工具。 注意：Windows 部分支持，详见22 安装 $ npm i egg-scripts --save 使用 将 eggctl 添加到 package.json 的 scripts 中： "scripts": "start": "eggctl start --daemon", "stop": "eggctl stop" 然后执行： npm start npm stop 注意： 不建议全局安装 egg-scripts，应将其作为 npm scripts 安装并使用。 命令 start 以生产模式启动 egg。 $ eggctl star...

CVE-2026-96832

Shop manager PHP Object Injection in Content Egg = 6.3.1 versions...

CVE-2026-96832

The WordPress Content Egg plugin (versions

CVE-2026-96832 WordPress Content Egg plugin <= 6.3.1 - PHP Object Injection vulnerability

Shop manager PHP Object Injection in Content Egg = 6.3.1 versions...

CVE-2026-96832 WordPress Content Egg plugin <= 6.3.1 - PHP Object Injection vulnerability

Shop manager PHP Object Injection in Content Egg = 6.3.1 versions...

EUVD-2026-89884

Shop manager PHP Object Injection in Content Egg = 6.3.1 versions...

CVE-2026-92424

The Content Egg WordPress plugin before 11.9.0 does not verify that a user running its bulk content-import feature is authorized for the import preset they select, and switches to the preset author's identity before creating the resulting post, allowing users with contributor-level access and abo...

WordPress Content Egg plugin < 11.9.0 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by aymen benlamari in WordPress Plugin Content Egg versions 11.9.0...

EUVD-2026-89621

The Content Egg WordPress plugin before 11.9.0 does not verify that a user running its bulk content-import feature is authorized for the import preset they select, and switches to the preset author's identity before creating the resulting post, allowing users with contributor-level access and abo...

CVE-2026-92424 Content Egg < 11.9.0 - Contributor+ Stored XSS via Import Queue

The Content Egg WordPress plugin before 11.9.0 does not verify that a user running its bulk content-import feature is authorized for the import preset they select, and switches to the preset author's identity before creating the resulting post, allowing users with contributor-level access and abo...

CVE-2026-92424 Content Egg < 11.9.0 - Contributor+ Stored XSS via Import Queue

The Content Egg WordPress plugin before 11.9.0 does not verify that a user running its bulk content-import feature is authorized for the import preset they select, and switches to the preset author's identity before creating the resulting post, allowing users with contributor-level access and abo...

CVE-2026-92424

The Content Egg WordPress plugin (versions prior to 11.9.0 ) is vulnerable to a stored Cross-Site Scripting (XSS) flaw. The issue arises because the bulk content-import feature fails to verify if a user is authorized to use a selected import preset; instead, it switches to the preset author's ide...

WordPress Content Egg plugin <= 6.3.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Content Egg versions = 6.3.1...

SUSE CVE-2026-52855

Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.12.3, config. placeholders in egg configuration-file templates allow a low-privileged user to read config.token, config.tokenid, and config.docker.registries from the full daemon...

GO-2026-6158 Wings exposes node configuration secrets through egg configuration-file templating in github.com/pterodactyl/wings

Wings exposes node configuration secrets through egg configuration-file templating in github.com/pterodactyl/wings...

WordPress Content Egg – Affiliate Product Importer & Price Comparison plugin <= 11.3.0 - Authenticated (Author+) Arbitrary File Deletion vulnerability

Authenticated Author+ Arbitrary File Deletion vulnerability discovered by Athiwat Tiprasaharn Jitlada, Itthidej Aramsri Boeing777 in WordPress Plugin Content Egg versions = 11.3.0...

Information Exposure

Wings is vulnerable to Information Exposure. The vulnerability is due to the use of config. placeholders in egg configuration-file templates, which allows a low-privileged attacker to read sensitive daemon configuration values, including config.token, config.tokenid, and Docker registry...

CVE-2026-15979

The Content Egg – Affiliate Product Importer & Price Comparison plugin for WordPress is vulnerable to Arbitrary File Deletion via Path Traversal in versions up to and including 11.3.0. This is due to insufficient validation of the 'imgfile' field within the ceggdata post metadata: the value passe...

CVE-2026-15979

The Content Egg – Affiliate Product Importer & Price Comparison plugin for WordPress is vulnerable to Arbitrary File Deletion via Path Traversal in versions up to and including 11.3.0. This is due to insufficient validation of the 'imgfile' field within the ceggdata post metadata: the value passe...

CVE-2026-15979

The Content Egg – Affiliate Product Importer & Price Comparison WordPress plugin is vulnerable up to version 11.3.0. The root cause is insufficient validation of the img_file field stored in post meta; its value passes through wp_strip_all_tags(), is stored directly, and is later concatenated int...