CVE Browser

Page 1

Vendor: Autoptimize Clear all

CVE-2023-2113 MEDIUM

Autoptimize < 3.1.7 - Admin+ Stored Cross-Site Scripting via Settings Import

CVSS 4.8 EPSS 0.47% May 30, 2023

CVE-2022-2635 MEDIUM

Autoptimize < 3.1.1 - Admin+ Stored Cross Site Scripting

CVSS 4.8 EPSS 0.64% Sep 16, 2022

CVE-2021-24378 MEDIUM

Autoptimize < 2.7.8 - Authenticated Stored XSS via File Upload

CVSS 4.8 EPSS 0.62% Jun 21, 2021

CVE-2021-24377 HIGH

Autoptimize < 2.7.8 - Race Condition leading to RCE

CVSS 8.1 EPSS 1.18% Jun 21, 2021

CVE-2021-24376 CRITICAL

Autoptimize < 2.7.8 - Arbitrary File Upload via "Import Settings"

CVSS 9.8 EPSS 3.73% Jun 21, 2021

CVE-2021-24332 MEDIUM

Autoptimize < 2.8.4 - Authenticated Stored Cross-Site Scripting (XSS)

CVSS 4.8 EPSS 0.63% May 24, 2021

CVE-2020-24948 HIGH

The ao_ccss_import AJAX call in Autoptimize Wordpress Plugin 2.7.6 does not ensure that the file provided is a legitimate Zip file, allowing high privilege use…

CVSS 7.2 EPSS 13.14% Sep 3, 2020

CVE ID	Description	Severity	CVSS	EPSS	Ecosystems	Published
CVE-2023-2113	Autoptimize < 3.1.7 - Admin+ Stored Cross-Site Scripting via Settings Import	MEDIUM	4.8	0.47%		May 30, 2023
CVE-2022-2635	Autoptimize < 3.1.1 - Admin+ Stored Cross Site Scripting	MEDIUM	4.8	0.64%		Sep 16, 2022
CVE-2021-24378	Autoptimize < 2.7.8 - Authenticated Stored XSS via File Upload	MEDIUM	4.8	0.62%		Jun 21, 2021
CVE-2021-24377	Autoptimize < 2.7.8 - Race Condition leading to RCE	HIGH	8.1	1.18%		Jun 21, 2021
CVE-2021-24376	Autoptimize < 2.7.8 - Arbitrary File Upload via "Import Settings"	CRITICAL	9.8	3.73%		Jun 21, 2021
CVE-2021-24332	Autoptimize < 2.8.4 - Authenticated Stored Cross-Site Scripting (XSS)	MEDIUM	4.8	0.63%		May 24, 2021
CVE-2020-24948	The ao_ccss_import AJAX call in Autoptimize Wordpress Plugin 2.7.6 does not ensure that the file provided is a legitimate Zip file, allowing high privilege use…	HIGH	7.2	13.14%		Sep 3, 2020

Rows per page

Showing 1 to 7 CVEs · page 1