Advisories · Technology

Autoptimize.

Every CVE that names Autoptimize among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-3220 CVE record

CVSS 8.8 High

Multiple Plugins - Unauthenticated Stored XSS via Minify Library
- Autoptimize
- Clearfy Cache
- Cross-site scripting (XSS)
Not analysed yet 18 May 2026
CVE-2023-2113 CVE record

CVSS 4.8 Medium

Autoptimize < 3.1.7 - Admin+ Stored Cross-Site Scripting via Settings Import
- Autoptimize
Not analysed yet 30 May 2023
CVE-2022-4057 CVE record

CVSS 5.3 Medium

Autoptimize < 3.1.0 - Sensitive Data Disclosure
- Autoptimize
Not analysed yet 2 Jan 2023
CVE-2022-2635 CVE record

Autoptimize < 3.1.1 - Admin+ Stored Cross Site Scripting
- Autoptimize
- Cross-site scripting (XSS)
Not analysed yet 16 Sept 2022
CVE-2021-24378 CVE record

Autoptimize < 2.7.8 - Authenticated Stored XSS via File Upload
- Autoptimize
- Cross-site scripting (XSS)
Not analysed yet 21 Jun 2021
CVE-2021-24377 CVE record

Autoptimize < 2.7.8 - Race Condition leading to RCE
- Autoptimize
- Race condition
Not analysed yet 21 Jun 2021
CVE-2021-24376 CVE record

Autoptimize < 2.7.8 - Arbitrary File Upload via "Import Settings"
- Autoptimize
- Unrestricted file upload
Not analysed yet 21 Jun 2021
CVE-2021-24332 CVE record

Autoptimize < 2.8.4 - Authenticated Stored Cross-Site Scripting (XSS)
- Autoptimize
- Cross-site scripting (XSS)
Not analysed yet 24 May 2021