https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T19:41:51.007682+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-319215 EUVD-2026-319215 2026-10-06T19:41:51.274406+00:00 EUVD-2026-319215 https://cve.radiocsirt.org/vuln/fkie_cve-2026-3220 fkie_cve-2026-3220 2026-10-06T19:41:51.274455+00:00

The Autoptimize WordPress plugin before 3.1.15, Clearfy Cache WordPress plugin before 2.4.2, Speed Optimizer WordPress plugin before 7.7.9 are vulnerable to unauthenticated Stored Cross-Site Scripting (XSS) due to a predictable replacement hash used during the HTML minification process and abusing a regular expression. This allows an attacker to inject arbitrary HTML attributes in the final HTML output by anticipating the placeholder format.

 https://cve.radiocsirt.org/vuln/ghsa-3jpv-pgxw-p274 GHSA-3jpv-pgxw-p274 2026-10-06T19:41:51.274490+00:00

The Autoptimize WordPress plugin before 3.1.15, Clearfy Cache WordPress plugin before 2.4.2, Speed Optimizer WordPress plugin before 7.7.9 are vulnerable to unauthenticated Stored Cross-Site Scripting (XSS) due to a predictable replacement hash used during the HTML minification process and abusing a regular expression. This allows an attacker to inject arbitrary HTML attributes in the final HTML output by anticipating the placeholder format.