CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
What the vulnerability does
Missing Authorization vulnerability in Bjoern WP Performance Pack wp-performance-pack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Performance Pack: from n/a through <= 2.5.3.
Explanation of Vulnerability in Simple Terms
WP Performance Pack versions up to 2.5.3 lack proper authorization checks, allowing authenticated users with low privileges to trigger a denial-of-service condition. An attacker with a basic user account can make requests that degrade site availability. The vulnerability requires valid WordPress credentials but no special interaction from other users.
What an attacker can do
Degrade site performance or availability by making authenticated requests that consume resources.
Potential impact on your site
Site performance may degrade or become temporarily unavailable if an authenticated user exploits this flaw.
Conditions required to exploit
Attacker must have a low-privilege WordPress user account (e.g., subscriber or contributor role).
Key dates
External resources
Related vulnerabilities
