Optimizingmatters Autoptimize
5 CVEs affecting Optimizingmatters Autoptimize. Latest disclosed: 2026-10-02. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-14995 | High | 7.2 | 2026-10-01 | The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REQUEST_URI Path in all versions up to, and including, 3.1.15.1 due to in… |
CVE-2026-2430 | Medium | 6.4 | 2026-03-21 | The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the lazy-loading image processing in all versions up to, and including, 3… |
CVE-2026-2352 | Medium | 6.4 | 2026-03-21 | The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ao_post_preload' meta value in all versions up to, and including, 3… |
CVE-2025-13401 | Medium | 6.4 | 2025-12-03 | The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the LCP Image to preload metabox in all versions up to, and including, 3… |
CVE-2026-78471 | Medium | 5.4 | 2026-10-02 | The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author Name in all versions up to, and including, 3.1.15.1 due to… |