{"id":"CVE-2026-119087","kind":"vulnerability","aliases":["CVE-2026-119087"],"related":[],"title":"Content Egg WordPress plugin lets authors post as administrators","description":"The Content Egg – Affiliate Product Importer & Price Comparison plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 12.0.0 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with author-level access and above, to create posts attributed to another user's account — typically an administrator — by supplying an admin-owned preset_id, causing wp_insert_post to record the administrator as post_author. This includes the ability to create published posts when the attacker already holds publish_posts capability for the preset's post type, resulting in administrator-attributed published content created by a lower-privileged user.","summary":"The Content Egg WordPress plugin up to and including 12.0.0 lets an author-level user create posts attributed to another account, typically an administrator, by supplying an admin-owned preset_id. The attacker gets administrator-attributed published content, which can be used to make content look like it came from an admin.","severity":"medium","cvss":4.3,"epss":0.00222,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["content-egg","other","self-hosted","wordpress"],"not_affected_if":["no-author-accounts","plugin-not-installed"],"how_to_check":"- Check the installed Content Egg plugin version in the WordPress admin plugin list or `wp plugin get content-egg --field=version`\n- Review which accounts hold author-level or higher roles on the site","fix":null,"status":"open","published_at":"2026-10-30T06:16:48+00:00","first_seen_at":"2026-10-30T06:28:39+00:00","triaged_at":"2026-10-30T06:29:56+00:00","updated_at":"2026-10-30T18:23:37+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-10-30T06:29:56Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Content Egg WordPress plugin lets authors post as administrators","impact":"low","summary":"The Content Egg WordPress plugin up to and including 12.0.0 lets an author-level user create posts attributed to another account, typically an administrator, by supplying an admin-owned preset_id. The attacker gets administrator-attributed published content, which can be used to make content look like it came from an admin.","audience":"businesses","category":"other","nicknames":[],"who_cares":["wordpress","content-egg","self-hosted"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"Author attributes published posts to an administrator account","analyst_note":"Check the NVD entry and the plugin changelog for a fixed version beyond 12.0.0 and confirm the affected version range.","how_to_check":"- Check the installed Content Egg plugin version in the WordPress admin plugin list or `wp plugin get content-egg --field=version`\n- Review which accounts hold author-level or higher roles on the site","plain_action":"","needs_analyst":true,"not_affected_if":["plugin-not-installed","no-author-accounts"],"who_is_affected":"Sites running the Content Egg plugin version 12.0.0 or earlier where authors or other logged-in users with publish rights exist. The flaw needs an authenticated account with author-level access, so sites with only trusted editors or no author accounts are at lower risk. unknown whether a fixed version exists.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000703,"input_tokens":4256,"output_tokens":554,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-119087':12A,15A '-2026':11A,14A '12.0.0':33B,102C 'abil':169C 'access':132C 'account':45B,143C 'action':120C 'admin':53B,78B,151C 'admin-own':52B,150C 'administr':9A,48B,61B,146C,162C,191C 'administrator-attribut':60B,190C 'affili':82C 'alreadi':177C 'anoth':44B,140C 'attack':58B,127C,176C 'attribut':42B,62B,138C,192C 'authent':126C 'author':6A,37B,93C,116C,130C,165C 'author-level':36B,129C 'bypass':94C 'came':75B 'capabl':181C 'caus':155C 'comparison':86C 'content':1A,17B,25B,64B,71B,80C,194C 'content-egg':16B 'creat':40B,136C,171C,195C 'cve':10A,13A 'due':105C 'egg':2A,18B,26B,81C 'get':59B 'hold':178C 'host':22B 'id':56B,154C 'import':84C 'includ':32B,101C,167C 'insert':157C 'let':5A,34B 'level':38B,131C 'like':73B 'look':72B 'lower':199C 'lower-privileg':198C 'make':70B,122C 'own':54B,152C 'perform':118C 'plugin':4A,28B,87C,108C 'possibl':124C 'post':7A,41B,137C,158C,164C,173C,180C,186C 'preset':55B,153C,184C 'price':85C 'privileg':200C 'product':83C 'proper':110C 'publish':63B,172C,179C,193C 'record':160C 'result':188C 'self':21B 'self-host':20B 'suppli':50B,148C 'type':187C 'typic':46B,144C 'use':68B 'user':39B,114C,141C,201C 'verifi':111C 'version':97C 'vulner':91C 'wordpress':3A,23B,27B,89C 'wp':156C","nicknames":[],"mitigations":[],"who_affected":"Sites running the Content Egg plugin version 12.0.0 or earlier where authors or other logged-in users with publish rights exist. The flaw needs an authenticated account with author-level access, so sites with only trusted editors or no author accounts are at lower risk. unknown whether a fixed version exists.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"first_public_at":"2026-10-30T06:16:48+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvss_by":"security@wordfence.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119087","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119087","severity":null,"published_at":"2026-10-30T06:16:48+00:00","modified_at":"2026-10-30T06:16:48+00:00","first_seen_at":"2026-10-30T06:28:39+00:00","fetched_at":"2026-10-30T06:28:39+00:00","note":null},{"source":"epss","external_id":"CVE-2026-119087","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-119087","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-30T18:23:37+00:00","fetched_at":"2026-10-30T18:23:37+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}