Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Autoptimize — Vulnerabilities & Security Advisories 13

All 13 CVE vulnerabilities found in Autoptimize, with AI-generated Chinese analysis, references, and POCs.

Vendor: Unknown

CVE ID Title CVSS Severity Published
CVE-2026-78471 Autoptimize <= 3.1.15.1 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name CWE-79 5.4 Medium 2026-10-02
CVE-2026-14995 Autoptimize <= 3.1.15.1 - Unauthenticated Stored Cross-Site Scripting via REQUEST_URI Path CWE-79 7.2 High 2026-10-01
CVE-2026-3220 Multiple Plugins - Unauthenticated Stored XSS via Minify Library - - 2026-05-18
CVE-2026-2430 Autoptimize <= 3.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lazy-loaded Image Attributes CWE-79 6.4 Medium 2026-03-20
CVE-2026-2352 Autoptimize <= 3.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ao_post_preload' Meta Value CWE-79 6.4 Medium 2026-03-20
CVE-2025-13401 Autoptimize <= 3.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium 2025-12-03
CVE-2023-2113 Autoptimize < 3.1.7 - Admin+ Stored Cross-Site Scripting via Settings Import 4.8 - 2023-05-30
CVE-2022-4057 Autoptimize < 3.1.0 - Sensitive Data Disclosure 5.3 - 2023-01-02
CVE-2022-2635 Autoptimize < 3.1.1 - Admin+ Stored Cross Site Scripting CWE-79 4.8 - 2022-09-16
CVE-2021-24378 Autoptimize < 2.7.8 - Authenticated Stored XSS via File Upload CWE-79 4.8 - 2021-06-21
CVE-2021-24377 Autoptimize < 2.7.8 - Race Condition leading to RCE CWE-362 8.1 - 2021-06-21
CVE-2021-24376 Autoptimize < 2.7.8 - Arbitrary File Upload via "Import Settings" CWE-434 9.8 - 2021-06-21
CVE-2021-24332 Autoptimize < 2.8.4 - Authenticated Stored Cross-Site Scripting (XSS) CWE-79 4.8 - 2021-05-24

All 13 known CVE vulnerabilities affecting Autoptimize with full Chinese analysis, references, and POCs where available.