Autoptimize

Vulnerabilities 16Slug autoptimizeLatest version 3.1.15.1WordPress.org →

Minimum safe version

3.1.15

Update to 3.1.15 or later to address 16 fixable vulnerabilities

Latest available3.1.15.1 ✓
N/A
2026-03-20< 3.1.15

Autoptimize <= 3.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lazy-loaded Image Attributes

WordfenceCVE
N/A
2026-03-20< 3.1.15

Autoptimize <= 3.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ao_post_preload' Meta Value

WordfenceCVE
N/A
2023-04-25< 3.1.7

WordPress Autoptimize Plugin <= 3.1.6 is vulnerable to Cross Site Scripting (XSS)

Patchstack
N/A
2023-04-23< 3.1.7

WordPress Autoptimize Plugin <= 3.1.6 is vulnerable to Cross Site Scripting (XSS)

Patchstack
N/A
2017-06-19< 2.1.1

Autoptimize <= 2.1.0 - Unauthenticated Local File Inclusion

Wordfence
N/A
< 3.1.0

WordPress Autoptimize Plugin <= 3.0.4 is vulnerable to Sensitive Data Exposure

Patchstack
N/A
2021-05-04< 2.8.4

WordPress Autoptimize plugin <= 2.8.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Patchstack