CVE-2026-96832: WordPress Content Egg plugin <= 6.3.1 - PHP Object Injection vulnerability
Published Sep 30, 2026
·Updated
Shop manager PHP Object Injection in Content Egg <= 6.3.1 versions.
Affected Software
1 affected component
Keywordrush Content Egg<=6.3.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Content Egg pluginto a version that resolves this vulnerability.Fixed in 11.9.0
Event History
Sep 30, 2026
CVE Published
via MITRE·12:27 PM
Data Sourced
via MITRE·12:27 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·01:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this vulnerability?
An attacker needs shop manager privileges in WordPress. The vulnerability does not indicate that unauthenticated or lower-privileged users can exploit it.
2
Which installations are affected?
Keywordrush Content Egg versions 6.3.1 and earlier are affected. The provided information does not state whether any particular plugin configuration or WordPress default setting is required.
3
What is the potential impact of successful exploitation?
Successful exploitation can compromise confidentiality, integrity, and availability at a high level. The issue is a PHP object injection vulnerability.