Plugin icon

Autoptimize

autoptimize

Vulnerabilities:

9

Last Updated:

November 23, 2025

Active Installs:

900000

Published
Title
Fixed in
CVSS
Published
2025-12-03
Title
Autoptimize < 3.1.14 - Contributor+ Stored XSS
Fixed in
Fixed in 3.1.14
CVSS
5.9 (medium)
Published
2023-05-02
Title
Autoptimize < 3.1.7 - Admin+ Stored Cross-Site Scripting via Settings Import
Fixed in
Fixed in 3.1.7
CVSS
3.5 (low)
Published
2022-12-05
Title
Autoptimize < 3.1.0 - Sensitive Data Disclosure
Fixed in
Fixed in 3.1.0
CVSS
5.3 (medium)
Published
2022-08-17
Title
Autoptimize < 3.1.1 - Admin+ Stored Cross Site Scripting
Fixed in
Fixed in 3.1.1
CVSS
3.4 (low)
Published
2021-05-07
Title
Autoptimize < 2.8.4 - Authenticated Stored Cross-Site Scripting (XSS)
Fixed in
Fixed in 2.8.4
CVSS
6.6 (medium)
Published
2020-10-09
Title
Autoptimize < 2.7.8 - Authenticated Stored XSS via File Upload
Fixed in
Fixed in 2.7.8
CVSS
4.8 (medium)
Published
2020-10-09
Title
Autoptimize < 2.7.8 - Race Condition leading to RCE
Fixed in
Fixed in 2.7.8
CVSS
9.1 (critical)
Published
2020-10-09
Title
Autoptimize < 2.7.8 - Arbitrary File Upload via "Import Settings"
Fixed in
Fixed in 2.7.8
CVSS
9.1 (critical)
Published
2020-08-24
Title
Autoptimize < 2.7.7 - Authenticated Arbitrary File Upload
Fixed in
Fixed in 2.7.7
CVSS
6.7 (medium)