Skip to content
Noroxi

autoptimize records

7 published records for vendor autoptimize.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 20
  2. 21
  3. 22
  4. 23

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

7 records
  • CVE-2021-24376
    40Plan

    Autoptimize < 2.7.8 - Arbitrary File Upload via "Import Settings"

    CriticalCVSS 9.8No exploitEPSS 4%

    autoptimize · autoptimizeJun 21, 2021

  • CVE-2020-24948
    32Monitor

    The ao_ccss_import AJAX call in Autoptimize Wordpress Plugin 2.7.6 does not ensure that the file provided is a legitimate Zip file, allowing

    HighCVSS 7.2No exploitEPSS 13%

    autoptimize · autoptimizeSep 3, 2020

  • CVE-2021-24377
    32Monitor

    Autoptimize < 2.7.8 - Race Condition leading to RCE

    HighCVSS 8.1No exploitEPSS 1%

    autoptimize · autoptimizeJun 21, 2021

  • CVE-2022-2635
    19Monitor

    Autoptimize < 3.1.1 - Admin+ Stored Cross Site Scripting

    MediumCVSS 4.8No exploitEPSS 1%

    autoptimize · autoptimizeSep 16, 2022

  • CVE-2021-24332
    19Monitor

    Autoptimize < 2.8.4 - Authenticated Stored Cross-Site Scripting (XSS)

    MediumCVSS 4.8No exploitEPSS 1%

    autoptimize · autoptimizeMay 24, 2021

  • CVE-2021-24378
    19Monitor

    Autoptimize < 2.7.8 - Authenticated Stored XSS via File Upload

    MediumCVSS 4.8No exploitEPSS 1%

    autoptimize · autoptimizeJun 21, 2021

  • CVE-2023-2113
    19Monitor

    Autoptimize < 3.1.7 - Admin+ Stored Cross-Site Scripting via Settings Import

    MediumCVSS 4.8No exploitEPSS 0%

    autoptimize · autoptimizeMay 30, 2023