Skip to content
OpenAdvisories

Vendor

Automatic.css

1 known vulnerabilities.

Products

Automatic.css 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.4
    CVE-2026-15273

    Automatic.css 4.0.0 - Unauthenticated Stored Cross-Site Scripting via REQUEST_URI

    The Automatic.css plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REQUEST_URI in all version 4.0.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web s…

    Automatic.css Automatic.css Web / CMS