WordPress security by component

Add Expires Headers & Optimized Minify

Plugin description

Add Expires Headers & Optimized Minify is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Jan 23, 2026; the highest CVE/CNA score is 5.3.

Plugin slug: add-expires-headers

Latest vulnerability

CVE-2026-24633: Add Expires Headers & Optimized Minify: A security weakness

Add Expires Headers & Optimized Minify is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedJan 23, 2026

Safe version guidanceSee mitigation notes

		Safe version
Jan 23, 2026	CVE-2026-24633 Add Expires Headers & Optimized Minify: A security weakness Add Expires Headers & Optimized Minify is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE5.3 NVDPending
Nov 22, 2023	CVE-2023-27457 Add Expires Headers: Cross-site request forgery Add Expires Headers is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.	See mitigation notes	CVE4.3 NVD8.8