Exposure of Autoptimize

Performance, WordPress plugins

18

exposure score

86,551

sites use

0

exploited

0

critical

CVEs

11 results

CVE-2021-24376—Autoptimize < 2.7.8 - Arbitrary File Upload via "Import Settings"EPSS 3.7%CVE-2022-4057MEDIUMAutoptimize < 3.1.0 - Sensitive Data DisclosureEPSS 1.5%CVE-2021-24377—Autoptimize < 2.7.8 - Race Condition leading to RCEEPSS 1.2%CVE-2021-24332—Autoptimize < 2.8.4 - Authenticated Stored Cross-Site Scripting (XSS)EPSS 0.6%CVE-2021-24378—Autoptimize < 2.7.8 - Authenticated Stored XSS via File UploadEPSS 0.6%CVE-2022-2635—Autoptimize < 3.1.1 - Admin+ Stored Cross Site ScriptingEPSS 0.5%CVE-2023-2113MEDIUMAutoptimize < 3.1.7 - Admin+ Stored Cross-Site Scripting via Settings ImportEPSS 0.5%CVE-2026-3220HIGHMultiple Plugins - Unauthenticated Stored XSS via Minify LibraryEPSS 0.3%CVE-2025-13401MEDIUMAutoptimize <= 3.1.13 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2026-2352MEDIUMAutoptimize <= 3.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ao_post_preload' Meta ValueEPSS 0.3%CVE-2026-2430MEDIUMAutoptimize <= 3.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lazy-loaded Image AttributesEPSS 0.2%

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →