Optimizingmatters Autoptimize vulnerabilities

• optimizingmatters autoptimize Autoptimize <= 3.1.15.1 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name CVE-2026-78471 5.4 MediumOctober 2, 2026
• optimizingmatters autoptimize Autoptimize <= 3.1.15.1 - Unauthenticated Stored Cross-Site Scripting via REQUEST_URI Path CVE-2026-14995 7.2 HighOctober 1, 2026
• creative motion clearfy cache, optimizingmatters autoptimize, siteground speed optimizer +2 more Multiple Plugins - Unauthenticated Stored XSS via Minify Library CVE-2026-3220 8.8 HighMay 18, 2026
• optimizingmatters autoptimize Autoptimize <= 3.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lazy-loaded Image Attributes CVE-2026-2430 6.4 MediumMarch 20, 2026
• optimizingmatters autoptimize Autoptimize <= 3.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ao_post_preload' Meta Value CVE-2026-2352 6.4 MediumMarch 20, 2026
• optimizingmatters autoptimize Autoptimize <= 3.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-13401 Public exploit 6.4 MediumDecember 3, 2025
• autoptimize Autoptimize < 3.1.7 - Admin+ Stored Cross-Site Scripting via Settings Import CVE-2023-2113 4.8 MediumMay 30, 2023
• optimizingmatters autoptimize, autooptimize +1 more Autoptimize < 3.1.0 - Sensitive Data Disclosure CVE-2022-4057 5.3 MediumJanuary 2, 2023
• autoptimize Autoptimize < 3.1.1 - Admin+ Stored Cross Site Scripting CVE-2022-2635 4.8 MediumSeptember 16, 2022
• autoptimize Autoptimize < 2.7.8 - Authenticated Stored XSS via File Upload CVE-2021-24378 4.8 MediumJune 21, 2021
• autoptimize Autoptimize < 2.7.8 - Race Condition leading to RCE CVE-2021-24377 8.1 HighJune 21, 2021
• autoptimize Autoptimize < 2.7.8 - Arbitrary File Upload via "Import Settings" CVE-2021-24376 9.8 CriticalJune 21, 2021
• autoptimize Autoptimize < 2.8.4 - Authenticated Stored Cross-Site Scripting (XSS) CVE-2021-24332 4.8 MediumMay 24, 2021