optimizingmatters

Products

Product	CVEs	Exploited	Latest
Autoptimize	5	–	Oct 2, 2026

CVE-2026-78471 Medium 5.4 Autoptimize <= 3.1.15.1 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name 0.2%
CVE-2026-14995 High 7.2 Autoptimize <= 3.1.15.1 - Unauthenticated Stored Cross-Site Scripting via REQUEST_URI Path 0.3%
CVE-2026-2430 Medium 6.4 Autoptimize <= 3.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lazy-loaded Image Attributes 0.2%
CVE-2026-2352 Medium 6.4 Autoptimize <= 3.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ao_post_preload' Meta Value 0.3%
CVE-2025-13401 Medium 6.4 Autoptimize <= 3.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%