The vulnerability CVE-2025-47536 affects keywordrush Content Egg plugin versions up to 7.0.0. It is caused by deserialization of untrusted data, allowing an attacker with high privileges to inject malicious objects. The CVSS 3.1 base score is 7.2, indicating high severity, with network attack vector, low attack complexity, required high privileges, no user interaction, and impacts on confidentiality, integrity, and availability. No patch or vendor advisory details are currently available.

Successful exploitation of this vulnerability could allow an attacker with high privileges to execute arbitrary code or manipulate the application state, leading to full compromise of confidentiality, integrity, and availability of the affected system. Since the attack requires high privileges, the threat is limited to users who already have elevated access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the plugin and limit high-privilege user accounts to trusted personnel only. Monitor for updates from the vendor or security advisories for a patch or official mitigation.