CVE Catalog
CVE-2026-96832
HighCVSS 7.2Summary
PHP Object Injection vulnerability in Content Egg plugin up to version 6.3.1, exploitable by users with Shop manager role. May lead to execution of malicious PHP objects.
Risk Assessment
Risk of remote code execution, site compromise, or privilege escalation.
Recommendation
Update the Content Egg plugin to the latest version with the security fix and restrict access to Shop manager accounts.
Other vulnerabilities in Content Egg
Original NVD description (English source)
Shop manager PHP Object Injection in Content Egg <= 6.3.1 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS