CVE-2026-119087
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
The Content Egg plugin for WordPress in versions up to and including 12.0.0 does not properly verify that a user is authorized to perform an action. An authenticated attacker with author-level access or above can create posts attributed to another user's account, typically an administrator, by supplying an admin-owned preset_id.
Risk Assessment
A lower-privileged attacker can publish content attributed to an administrator, undermining trust in content and potentially enabling misleading or unauthorized publications.
Recommendation
Update the Content Egg plugin to a version later than 12.0.0 that contains the fix. Until then, restrict author roles and monitor posts attributed to administrators.
Other vulnerabilities in Content Egg
See all- CVE-2026-96832High
PHP Object Injection vulnerability in Content Egg plugin up to version 6.3.1, exploitable by users with Shop manager role. May lead to execution of malicious PHP objects.
- CVE-2026-119059Medium
The Content Egg plugin for WordPress in versions up to and including 12.0.0 lacks a per-post capability check in the ajaxUpdateProducts() function. An authenticated attacker with contributor-level access or above can modify Content Egg product data and update-timestamp post meta on arbitrary posts, including those owned by administrators.
- CVE-2026-15979High
The Content Egg plugin for WordPress is vulnerable to Arbitrary File Deletion via Path Traversal in versions up to and including 11.3.0. Insufficient validation of the 'img_file' field allows authenticated attackers with author-level access or above to delete arbitrary files on the server.
Original NVD description (English source)
The Content Egg – Affiliate Product Importer & Price Comparison plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 12.0.0 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with author-level access and above, to create posts attributed to another user's account — typically an administrator — by supplying an admin-owned preset_id, causing wp_insert_post to record the administrator as post_author. This includes the ability to create published posts when the attacker already holds publish_posts capability for the preset's post type, resulting in administrator-attributed published content created by a lower-privileged user.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS