Nixpkgs security tracker
Untriaged
Permalink
CVE-2026-56045
7.1 HIGH
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): None (N)
- User Interaction (UI): Required (R)
- Scope (S): Changed (C)
- Confidentiality (C): Low (L)
- Integrity (I): Low (L)
- Availability (A): Low (L)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): None (N)
- Modified User Interaction (MUI): Required (R)
- Modified Confidentiality (MC): Low (L)
- Modified Scope (MS): Changed (C)
- Modified Integrity (MI): Low (L)
- Modified Availability (MA): Low (L)
Activity log
- Created suggestion
WordPress Automatic plugin < 3.135.1 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Automatic < 3.135.1 versions.
References
Affected products
wp-automatic
- <3.135.1
Matching in nixpkgs
pkgs.automatic-timezoned
Automatically update system timezone based on location
pkgs.automaticcomponenttoolkit
Toolkit to automatically generate software components: abstract API, implementation stubs and language bindings
pkgs.gnomeExtensions.automatic-theme-switcher
Automatically switches between light and dark themes based on sunrise/sunset times for your location.
pkgs.gnomeExtensions.yaru-automatic-dark-mode
Automatically switches between light and dark versions of the Yaru shell, icon, and GTK themes based on your system's dark mode setting. Users must first install and enable these themes manually, for example via GNOME Tweaks.