https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 07:07:13 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-92424 <p>The Content Egg WordPress plugin before 11.9.0 does not verify that a user running its bulk content-import feature is authorized for the import preset they select, and switches to the preset author&#39;s identity before creating the resulting post, allowing users with contributor-level access and above to store arbitrary web scripts unfiltered under a privileged user&#39;s account, executing in the context of anyone who later views that content.</p> <p>The Content Egg WordPress plugin before 11.9.0 does not verify that a user running its bulk content-import feature is authorized for the import preset they select, and switches to the preset author&#39;s identity before creating the resulting post, allowing users with contributor-level access and above to store arbitrary web scripts unfiltered under a privileged user&#39;s account, executing in the context of anyone who later views that content.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-92424 https://vulnerability.circl.lu/vuln/ghsa-f6mm-vhgg-jr4m <p>The Content Egg WordPress plugin before 11.9.0 does not verify that a user running its bulk content-import feature is authorized for the import preset they select, and switches to the preset author&#39;s identity before creating the resulting post, allowing users with contributor-level access and above to store arbitrary web scripts unfiltered under a privileged user&#39;s account, executing in the context of anyone who later views that content.</p> <p>The Content Egg WordPress plugin before 11.9.0 does not verify that a user running its bulk content-import feature is authorized for the import preset they select, and switches to the preset author&#39;s identity before creating the resulting post, allowing users with contributor-level access and above to store arbitrary web scripts unfiltered under a privileged user&#39;s account, executing in the context of anyone who later views that content.</p> https://vulnerability.circl.lu/vuln/ghsa-f6mm-vhgg-jr4m