« Back to list

Keywordrush

Keywordrush Content EGG: vulnerabilities and CVEs

Keywordrush Content EGG has 6 published vulnerabilities, 3 of them in the last 12 months. 0 are rated critical and 0 are listed by CISA as actively exploited.

CVEs6
Last 12 months3
Critical0
Actively exploited0

All vulnerabilities in the catalogue →⭐ Follow this technology

Latest vulnerabilities

CVESeverityEPSSActive exploitationPublishedDescription
CVE-2026-96832High (7.2)0.54%—Sep 30, 2026
Shop manager PHP Object Injection in Content Egg <= 6.3.1 versions.
CVE-2026-92424Medium (6.8)0.24%—Sep 30, 2026
The Content Egg WordPress plugin before 11.9.0 does not verify that a user running its bulk content-import feature is authorized for the import preset they select, and switches to the preset author's identity before…
CVE-2026-15979High (8.1)1.2%—Aug 5, 2026
The Content Egg – Affiliate Product Importer & Price Comparison plugin for WordPress is vulnerable to Arbitrary File Deletion via Path Traversal in versions up to and including 11.3.0. This is due to insufficient…
CVE-2025-47536High (7.2)0.47%—Aug 14, 2025
Deserialization of Untrusted Data vulnerability in keywordrush Content Egg content-egg allows Object Injection.This issue affects Content Egg: from n/a through <= 7.0.0.
CVE-2022-25952High (8.8)0.32%—Nov 3, 2022
Cross-Site Request Forgery (CSRF) vulnerability in Keywordrush Content Egg plugin <= 5.4.0 on WordPress.
CVE-2022-0428Medium (6.1)0.80%—May 2, 2022
The Content Egg WordPress plugin before 5.3.0 does not sanitise and escape the page parameter before outputting back in an attribute in the Autoblogging admin dashboard, leading to a Reflected Cross-Site Scripting

🎯 How it gets exploited (ATT&CK techniques)

  1. T1059 Command and Scripting Interpreter1
  2. T1059.007 JavaScript1
  3. T1189 Drive-by Compromise1
  4. T1210 Exploitation of Remote Services1

Number of CVEs of this technology mapped to each exploitation or primary-impact technique.