Autoptimize

WordPress plugin · autoptimize · WordPress.org ↗

Latest v3.1.15.1 Last release Aug 20, 2026 Tested up to WP 7.1.1 800,000+ active installs

Critical

High

Known total

Unfixed

Running Autoptimize on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
CRITICAL CVSS 9.8	Autoptimize [autoptimize] < 2.7.8 WPVulnerability	< 2.7.8	v2.7.8	CVE-2021-24376	Oct 9, 2020
HIGH CVSS 8.8	Multiple Plugins - Unauthenticated Stored XSS via Minify Library CVE.org	>=0, <3.1.15	v3.1.15	CVE-2026-3220	May 18, 2026
HIGH CVSS 8.1	Autoptimize [autoptimize] < 2.7.8 WPVulnerability	< 2.7.8	v2.7.8	CVE-2021-24377	Oct 9, 2020
HIGH CVSS 7.2	Autoptimize [autoptimize] < 2.7.7 WPVulnerability	< 2.7.7	v2.7.7	CVE-2020-24948	Aug 24, 2020
MEDIUM CVSS 6.4	Autoptimize [autoptimize] < 3.1.14 WPVulnerability	< 3.1.14	v3.1.14	CVE-2025-13401	Dec 3, 2025
MEDIUM CVSS 4.8	Autoptimize [autoptimize] < 3.1.7 WPVulnerability · PoC available	< 3.1.7	v3.1.7	CVE-2023-2113	Apr 25, 2023
MEDIUM CVSS 5.3	Autoptimize [autoptimize] < 3.1.0 WPVulnerability · PoC available	< 3.1.0	v3.1.0	CVE-2022-4057	Dec 5, 2022
MEDIUM CVSS 4.8	Autoptimize [autoptimize] < 3.1.1 WPVulnerability	< 3.1.1	v3.1.1	CVE-2022-2635	Jul 19, 2022
MEDIUM CVSS 4.8	Autoptimize [autoptimize] < 2.8.4 WPVulnerability	< 2.8.4	v2.8.4	CVE-2021-24332	May 7, 2021
MEDIUM CVSS 4.8	Autoptimize [autoptimize] < 2.7.8 WPVulnerability	< 2.7.8	v2.7.8	CVE-2021-24378	Oct 9, 2020
UNKNOWN	Autoptimize [autoptimize] < 3.1.15 WPVulnerability · PoC available	< 3.1.15	v3.1.15	CVE-2026-3220	Apr 27, 2026
UNKNOWN	Autoptimize [autoptimize] < 3.1.15 WPVulnerability	< 3.1.15	v3.1.15	CVE-2026-2430	Mar 20, 2026
UNKNOWN	Autoptimize [autoptimize] < 3.1.15 WPVulnerability	< 3.1.15	v3.1.15	CVE-2026-2352	Mar 20, 2026
UNKNOWN	Autoptimize [autoptimize] < 3.1.7 WPVulnerability	< 3.1.7	v3.1.7	—	Apr 25, 2023
UNKNOWN	Autoptimize [autoptimize] < 3.1.7 WPVulnerability	< 3.1.7	v3.1.7	—	Apr 23, 2023
UNKNOWN	Autoptimize [autoptimize] < 2.8.4 WPVulnerability	< 2.8.4	v2.8.4	—	May 4, 2021
UNKNOWN	Autoptimize [autoptimize] < 2.1.1 WPVulnerability	< 2.1.1	v2.1.1	—	Jun 19, 2017
UNKNOWN	Autoptimize [autoptimize] < 3.1.0 WPVulnerability	< 3.1.0	v3.1.0	—	—

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.