CVE-2023-27457: Passionatebrains Add Expires Headers & Optimized Minify

High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) vulnerability in Passionate Brains Add Expires Headers & Optimized Minify plugin <= 2.7 versions.

Affected products

• Passionatebrains Add Expires Headers & Optimized Minify: up to and including 2.7

Published 2023-11-22. Last modified 2026-06-17.