CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in ShortPixel ShortPixel Adaptive Images shortpixel-adaptive-images allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ShortPixel Adaptive Images: from n/a through <= 3.10.0.
Explanation of Vulnerability in Simple Terms
ShortPixel Adaptive Images versions 3.10.0 and earlier lack proper authorization checks, allowing authenticated users with low privileges to modify or disable image optimization features. An attacker can alter site functionality and availability by tampering with image processing settings without proper permission validation. Update to a version newer than 3.10.0 to restore access controls.
What an attacker can do
Modify or disable image optimization settings and impact site availability.
Potential impact on your site
Unauthorized users can disrupt image optimization, affecting site performance and user experience.
Conditions required to exploit
Attacker must have a low-privilege authenticated account on the site.
Key dates
External resources
Related vulnerabilities
