CVE WATCH / VULNERABILITY DETAIL
CVE-2026-15273
MEDIUMCVSS 6.4NVD feed
Published 26 September 2026 · tracked since 26 September 2026
Description
The Automatic.css plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REQUEST_URI in all version 4.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts that will execute whenever an admi
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-107412
- CVE-2026-107411
- CVE-2026-16662 LOW 2.4
- CVE-2026-127928 LOW 2
- CVE-2026-127284 HIGH 7.3
- CVE-2026-127283 HIGH 7.3
- CVE-2026-127282 MEDIUM 4.3
- CVE-2026-107410
- CVE-2026-107409
- CVE-2026-107408