Optimizingmatters - vulnerabilities (CVEs)

6 CVEs in 2 products, 2 in the last 30 days, newest from 2026-10-02.

Products

• Autoptimize - 5 CVEs
• Autooptimize - 1 CVEs

Newest CVEs of Optimizingmatters

• CVE-2026-78471 - CVSS 5.4 (medium), 2026-10-02: The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author Name in all versions up to, and including, 3.1.15.1 due…
• CVE-2026-14995 - CVSS 7.2 (high), 2026-10-01: The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REQUEST_URI Path in all versions up to, and including, 3.1.15.1 due to…
• CVE-2026-2430 - CVSS 6.4 (medium), 2026-03-21: The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the lazy-loading image processing in all versions up to, and including,…
• CVE-2026-2352 - CVSS 6.4 (medium), 2026-03-21: The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ao_post_preload' meta value in all versions up to, and including,…
• CVE-2025-13401 - CVSS 6.4 (medium), 2025-12-03: The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the LCP Image to preload metabox in all versions up to, and including,…
• CVE-2022-4057 - CVSS 5.3 (medium), 2023-01-02: The Autoptimize WordPress plugin before 3.1.0 uses an easily guessable path to store plugin's exported settings and logs.