CVE-2026-15273 | Automatic.css Plugin 4.0.0 on WordPress Activity Log REQUEST_URI cross site scripting

September 26, 2026 Yanac

A vulnerability was found in Automatic.css Plugin 4.0.0 on WordPress and classified as problematic. Affected by this issue is some unknown functionality of the component Activity Log. Executing a manipulation of the argument REQUEST_URI can lead to cross site scripting.

The identification of this vulnerability is CVE-2026-15273. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More