All products

autoptimize

WordPress · Plugin
15 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Autoptimize <= 3.1.15.1 - Unauthenticated Stored Cross-Site Scripting via Comment Author NameCVE-2026-78471 autoptimize WordPress Medium Fix reported
Autoptimize <= 3.1.15.1 - Unauthenticated Stored Cross-Site Scripting via REQUEST_URI PathCVE-2026-14995 autoptimize WordPress High Fix reported
Multiple Plugins <= Multiple Versions - Unauthenticated Stored Cross-Site ScriptingCVE-2026-3220 autoptimizeclearfy WordPress High Fix reported
Autoptimize <= 3.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lazy-loaded Image AttributesCVE-2026-2430 autoptimize WordPress Medium Fix reported
Autoptimize <= 3.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ao_post_preload' Meta ValueCVE-2026-2352 autoptimize WordPress Medium Fix reported
Autoptimize <= 3.1.13 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-13401 autoptimize WordPress Medium Fix reported
Autoptimize <= 2.1.0 - Unauthenticated Local File Inclusion autoptimize WordPress Critical Fix reported
Autoptimize <= 3.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Critical CSS SettingsCVE-2022-2635 autoptimize WordPress Medium Fix reported
Autoptimize <= 2.7.7 - Race Condition leading to Remote Code ExecutionCVE-2021-24377 autoptimize WordPress High Fix reported
Autoptimize <= 3.1.6 - Authenticated (Admin+) Stored Cross-Site Scripting via Critical CSS RulesCVE-2023-2113 autoptimize WordPress Medium Fix reported
Autoptimize <= 2.7.7 - Unsafe File Upload to Cross-Site ScriptingCVE-2021-24378 autoptimize WordPress Medium Fix reported
Autoptimize <= 2.8.3 - Stored Cross-Site ScriptingCVE-2021-24332 autoptimize WordPress Medium Fix reported
Autoptimize <= 2.7.7 - Arbitrary File Upload (and Remote Code Execution) via Import SettingsCVE-2021-24376 autoptimize WordPress Critical Fix reported
Autoptimize <= 3.0.4 - Sensitive Information DisclosureCVE-2022-4057 autoptimize WordPress Medium Fix reported
Autoptimize <= 2.7.6 - Authenticated Arbitrary File UploadCVE-2020-24948 autoptimize WordPress High Fix reported