CVE-2026-104769Published
Debloat <= 1.3.0 - Unauthenticated Arbitrary File Read via 's' Search Parameter via @import url() in Reflected Search-Feed <link>
Exact source revision recorded 23 Oct 2026 15:48:27 UTC. It does not establish the source's current position. Latest evidence.
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-104769 · Microsoft / collected KEV context
cve-program · CVE-2026-104769
- https://www.wordfence.com/threat-intel/vulnerabilities/id/a8c9b57b-d60d-4197-a9f9-66206518733f?source=cve
- https://plugins.trac.wordpress.org/browser/debloat/tags/1.3.0/vendor/matthiasmullie/minify/src/CSS.php#L207
- https://plugins.trac.wordpress.org/browser/debloat/tags/1.3.0/vendor/matthiasmullie/minify/src/Minify.php#L218
- https://plugins.trac.wordpress.org/browser/debloat/tags/1.3.0/inc/minifier.php#L161
- https://plugins.trac.wordpress.org/browser/debloat/tags/1.3.0/inc/minifier.php#L82
- https://plugins.trac.wordpress.org/browser/debloat/tags/1.3.0/inc/optimize-css/optimize-css.php#L221
- https://plugins.trac.wordpress.org/browser/debloat/tags/1.3.0/inc/optimize-css/stylesheet.php#L80
- https://plugins.trac.wordpress.org/browser/debloat/tags/1.3.0/inc/process.php#L92
- https://plugins.trac.wordpress.org/browser/debloat/tags/1.3.0/inc/file-cache.php#L97
- https://plugins.trac.wordpress.org/changeset?reponame=&old=3735830%40debloat&new=3735830%40debloat
Current operational correlations are not mixed into this historical source record. Open latest evidence to discover current connections.