https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 12:14:37 +0000 https://vulnerability.circl.lu/vuln/cve-2026-92424 <p><strong>Affected:</strong> Unknown Content Egg</p> <p>The Content Egg WordPress plugin before 11.9.0 does not verify that a user running its bulk content-import feature is authorized for the import preset they select, and switches to the preset author&#39;s identity before creating the resulting post, allowing users with contributor-level access and above to store arbitrary web scripts unfiltered under a privileged user&#39;s account, executing in the context of anyone who later views that content.</p> <p><strong>Affected:</strong> Unknown Content Egg</p> <p>The Content Egg WordPress plugin before 11.9.0 does not verify that a user running its bulk content-import feature is authorized for the import preset they select, and switches to the preset author&#39;s identity before creating the resulting post, allowing users with contributor-level access and above to store arbitrary web scripts unfiltered under a privileged user&#39;s account, executing in the context of anyone who later views that content.</p> https://vulnerability.circl.lu/vuln/cve-2026-92424