keywordrush Content Egg Plugin up to 12.0.0 on WordPress wp_insert_post preset_id authorization

Summaryinfo

A vulnerability classified as problematic has been found in keywordrush Content Egg Plugin up to 12.0.0. Affected by this vulnerability is the function wp_insert_post. The manipulation of the argument preset_id leads to authorization. This vulnerability is referenced as CVE-2026-119087. Remote exploitation of the attack is possible. No exploit is available.

Detailsinfo

A vulnerability was found in keywordrush Content Egg Plugin up to 12.0.0 and classified as problematic. This issue affects the function wp_insert_post. The manipulation of the argument preset_id with an unknown input leads to a authorization vulnerability. Using CWE to declare the problem leads to CWE-639. The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data. Impacted is integrity. The summary by CVE is:

The Content Egg – Affiliate Product Importer & Price Comparison plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 12.0.0 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with author-level access and above, to create posts attributed to another user's account — typically an administrator — by supplying an admin-owned preset_id, causing wp_insert_post to record the administrator as post_author. This includes the ability to create published posts when the attacker already holds publish_posts capability for the preset's post type, resulting in administrator-attributed published content created by a lower-privileged user.

The advisory is shared at wordfence.com. The identification of this vulnerability is CVE-2026-119087 since 10/29/2026. The exploitation is known to be easy. The attack may be initiated remotely. Technical details are known, but no exploit is available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 10/30/2026).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• WordPress Plugin

Vendor

• keywordrush

Name

• Content Egg Plugin

Version

• 12.0

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion