Autoptimize (Optimizingmatters) - vulnerabilities (CVEs)

5 CVEs, 2 in the last 30 days, 2 known versions, newest CVE from 2026-10-02. Vendor: Optimizingmatters.

CVEs of Autoptimize

• CVE-2026-78471 - CVSS 5.4 (medium), 2026-10-02: The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author Name in all versions up to, and including, 3.1.15.1 due…
• CVE-2026-14995 - CVSS 7.2 (high), 2026-10-01: The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REQUEST_URI Path in all versions up to, and including, 3.1.15.1 due to…
• CVE-2026-2430 - CVSS 6.4 (medium), 2026-03-21: The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the lazy-loading image processing in all versions up to, and including,…
• CVE-2026-2352 - CVSS 6.4 (medium), 2026-03-21: The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ao_post_preload' meta value in all versions up to, and including,…
• CVE-2025-13401 - CVSS 6.4 (medium), 2025-12-03: The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the LCP Image to preload metabox in all versions up to, and including,…