https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T07:10:25.011652+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-15273 fkie_cve-2026-15273 2026-09-28T07:10:25.040297+00:00

The Automatic.css plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REQUEST_URI in all version 4.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts that will execute whenever an administrator accesses the Activity Log settings page.

 https://db.gcve.eu/vuln/ghsa-xhhf-8p83-jrh4 GHSA-xhhf-8p83-jrh4 2026-09-28T07:10:25.040396+00:00

The Automatic.css plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REQUEST_URI in all version 4.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts that will execute whenever an administrator accesses the Activity Log settings page.