keywordrush vulnerabilities and threats

Shop manager PHP Object Injection in Content Egg <= 6.3.1 versions.

The Content Egg – Affiliate Product Importer & Price Comparison WordPress plugin up to version 11.3.0 contains a path traversal vulnerability that allows authenticated users with author-level access or higher to delete arbitrary files on the server. This occurs because the plugin insufficiently validates the 'img_file' field, enabling crafted input to bypass filtering and cause deletion via PHP's unlink() function. This vulnerability can lead to denial of service or potentially remote code execution if critical files are deleted.

Deserialization of Untrusted Data vulnerability in keywordrush Content Egg content-egg allows Object Injection.This issue affects Content Egg: from n/a through <= 7.0.0.