Content Egg

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-25952 Nov 03, 20:15 HIGH This Week

Cross-Site Request Forgery (CSRF) vulnerability in Keywordrush Content Egg plugin <= 5.4.0 on WordPress. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF Wordpress Plugin Content Egg Keywordrush

NVD

CVSS 3.1

8.8

EPSS

0.3%

CVE-2022-0428 May 02, 16:15 MEDIUM POC This Month

The Content Egg WordPress plugin before 5.3.0 does not sanitise and escape the page parameter before outputting back in an attribute in the Autoblogging admin dashboard, leading to a Reflected. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress XSS Content Egg Keywordrush

NVD WPScan

CVSS 3.1

6.1

EPSS

0.9%

CVE-2022-25952

EPSS 0% CVSS 8.8

HIGH This Week

WordPress CSRF Wordpress Plugin +2

NVD

CVE-2022-0428

EPSS 1% CVSS 6.1

MEDIUM POC This Month

WordPress XSS Content Egg +1

NVD WPScan