CVE-2022-4057

The Autoptimize plugin for WordPress up to version 3.0.4 contains a sensitive information exposure vulnerability affecting the import and export functionality. The 'ao_ccss_export_callback' and 'ao_ccss_import_callback' functions fail to remove the settings.json file after use, potentially exposing plugin configuration data to unauthorized access. An unauthenticated attacker could exploit this flaw to retrieve sensitive information stored in the plugin's settings. The vulnerability was fixed in version 3.1.0.

Based on public CVE data (MITRE/NVD).