CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in ShortPixel ShortPixel Image Optimizer shortpixel-image-optimiser allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ShortPixel Image Optimizer: from n/a through <= 5.6.3.
Explanation of Vulnerability in Simple Terms
ShortPixel Image Optimizer versions up to 5.6.3 lack proper authorization checks, allowing authenticated users with low privileges to modify or disable image optimization features. An attacker can alter site image processing settings or cause optimization to fail, affecting site performance and user experience. Update to a version newer than 5.6.3.
What an attacker can do
Modify image optimization settings or disable optimization features for the site.
Potential impact on your site
Unauthorized users can degrade image optimization, affecting site performance and visitor experience.
Conditions required to exploit
Attacker must have a low-privilege authenticated account on the site.
Key dates
External resources
Related vulnerabilities
