Autoptimize

autoptimize · plugin

Known security vulnerabilities for Autoptimize. Find out in seconds which version runs on your site with WP Lens.

4 known vulnerabilities

1 with public exploit code · latest Oct 1, 2026

Vulnerabilities

CVE-2026-14995
Autoptimize <= 3.1.15.1 - Unauthenticated Stored Cross-Site Scripting via REQUEST_URI Path
High 7.2
CVE-2026-2430
Autoptimize <= 3.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lazy-loaded Image Attributes
Medium 6.4
CVE-2026-2352
Autoptimize <= 3.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ao_post_preload' Meta Value
Medium 6.4
CVE-2025-13401
Autoptimize <= 3.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium 6.4