Skip to content
Threat Feed
Subscribe

Product

Content Egg (< 11.9.0)

1 brief RSS
low advisory

Content Egg: Stored Cross-Site Scripting via Import Queue (CVE-2026-92424)

The Content Egg plugin for WordPress contains a stored XSS vulnerability (CVE-2026-92424) allowing contributor-level users to inject malicious scripts into posts by impersonating an administrator during the import process.

Content Egg wordpress xss cve-2026-92424
2t 1c