CVE-2022-4057 - Autoptimize < 3.1.0 - Sensitive Data Disclosure

MEDIUM

Autoptimize < 3.1.0 - Sensitive Data Disclosure

Published Jan 2, 2023

5.3

MEDIUM

CVSS 3.1

EPSS 1.46%

The Autoptimize WordPress plugin before 3.1.0 uses an easily guessable path to store plugin's exported settings and logs.

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	Autoptimize	unaffected	Affected ≥ 0, < 3.1.0

No remediation recorded yet.

Weaknesses (1)

CWE-425

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-51434		Advisory
https://wpscan.com/vulnerability/95ee1b9c-1971-4c35-8527-5764e9ed64af		exploitvdb-entrytechnical-descriptionThird Party Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner WPScan

Published Jan 2, 2023

Updated Apr 10, 2025

Reserved Nov 18, 2022

CISA Vulnrichment

Updated Apr 10, 2025

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner WPScan

Published Jan 2, 2023

Updated Apr 10, 2025

GitHub

No data