CVE-2026-15979

The Content Egg – Affiliate Product Importer & Price Comparison plugin for WordPress is vulnerable to Arbitrary File Deletion via Path Traversal in versions up to and including 11.3.0. This is due to insufficient validation of the 'imgfile' field within the ceggdata post metadata: the value passe...

PT-2026-68168

Name of the Vulnerable Software and Affected Versions Content Egg – Affiliate Product Importer & Price Comparison versions prior to 11.3.1 Description An arbitrary file deletion issue exists due to path traversal, where an attacker can use special character sequences to access and delete files...

CVE-2026-15979: Improper Limitation of a Pathname to a Restricted Directory

The Content Egg – Affiliate Product Importer & Price Comparison plugin for WordPress is vulnerable to Arbitrary File Deletion via Path Traversal in versions up to and including 11.3.0. This is due to insufficient validation of the 'imgfile' field within the ceggdata post metadata: the value passe...