CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
What the vulnerability does
Missing Authorization vulnerability in Passionate Brains Add Expires Headers & Optimized Minify add-expires-headers allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Add Expires Headers & Optimized Minify: from n/a through <= 3.2.0.
Explanation of Vulnerability in Simple Terms
The Add Expires Headers & Optimized Minify plugin for WordPress contains a missing authorization flaw that allows unauthenticated attackers to trigger a denial-of-service condition. An attacker can send network requests without authentication to exhaust server resources or cause the site to become unavailable. This affects all versions up to and including 3.2.0.
What an attacker can do
Make the site unavailable or unresponsive by sending repeated requests without logging in.
Potential impact on your site
Your site may become slow or offline if targeted; no data theft or modification risk.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
