OP
Vendor
optimizingmatters
6
CVEs
0
On KEV
2
New 30D
Products
AU7.2
Autoptimize
optimizingmatters
5 CVEs0 on KEV2 new
AU5.3
Autooptimize
Optimizingmatters
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-78471 | AU Autoptimize optimizingmatters | 5.4 | Oct 2 | Autoptimize <= 3.1.15.1 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name |
| CVE-2026-14995 | AU Autoptimize optimizingmatters | 7.2 | Oct 1 | Autoptimize <= 3.1.15.1 - Unauthenticated Stored Cross-Site Scripting via REQUEST_URI Path |
| CVE-2026-2430 | AU Autoptimize optimizingmatters | 6.4 | Mar 20 | Autoptimize <= 3.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lazy-loaded Image Attributes |
| CVE-2026-2352 | AU Autoptimize optimizingmatters | 6.4 | Mar 20 | Autoptimize <= 3.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ao_post_preload' Meta Value |
| CVE-2025-13401 | AU Autoptimize optimizingmatters | 6.4 | Dec 3 | Autoptimize <= 3.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2022-4057 | AU Autooptimize Optimizingmatters | 5.3 | Jan 2 | Autoptimize < 3.1.0 - Sensitive Data Disclosure |
