Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
autoptimize
WordPress
· Plugin
15 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Autoptimize <= 3.1.15.1 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name
CVE-2026-78471
autoptimize
WordPress
Medium
Fix reported
2026-10-02
Autoptimize <= 3.1.15.1 - Unauthenticated Stored Cross-Site Scripting via REQUEST_URI Path
CVE-2026-14995
autoptimize
WordPress
High
Fix reported
2026-10-01
Multiple Plugins <= Multiple Versions - Unauthenticated Stored Cross-Site Scripting
CVE-2026-3220
autoptimize
clearfy
WordPress
High
Fix reported
2026-07-30
Autoptimize <= 3.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lazy-loaded Image Attributes
CVE-2026-2430
autoptimize
WordPress
Medium
Fix reported
2026-03-21
Autoptimize <= 3.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ao_post_preload' Meta Value
CVE-2026-2352
autoptimize
WordPress
Medium
Fix reported
2026-03-21
Autoptimize <= 3.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-13401
autoptimize
WordPress
Medium
Fix reported
2025-12-03
Autoptimize <= 2.1.0 - Unauthenticated Local File Inclusion
autoptimize
WordPress
Critical
Fix reported
2024-06-14
Autoptimize <= 3.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Critical CSS Settings
CVE-2022-2635
autoptimize
WordPress
Medium
Fix reported
2024-01-22
Autoptimize <= 2.7.7 - Race Condition leading to Remote Code Execution
CVE-2021-24377
autoptimize
WordPress
High
Fix reported
2024-01-22
Autoptimize <= 3.1.6 - Authenticated (Admin+) Stored Cross-Site Scripting via Critical CSS Rules
CVE-2023-2113
autoptimize
WordPress
Medium
Fix reported
2024-01-22
Autoptimize <= 2.7.7 - Unsafe File Upload to Cross-Site Scripting
CVE-2021-24378
autoptimize
WordPress
Medium
Fix reported
2024-01-22
Autoptimize <= 2.8.3 - Stored Cross-Site Scripting
CVE-2021-24332
autoptimize
WordPress
Medium
Fix reported
2024-01-22
Autoptimize <= 2.7.7 - Arbitrary File Upload (and Remote Code Execution) via Import Settings
CVE-2021-24376
autoptimize
WordPress
Critical
Fix reported
2024-01-22
Autoptimize <= 3.0.4 - Sensitive Information Disclosure
CVE-2022-4057
autoptimize
WordPress
Medium
Fix reported
2024-01-22
Autoptimize <= 2.7.6 - Authenticated Arbitrary File Upload
CVE-2020-24948
autoptimize
WordPress
High
Fix reported
2024-01-22