CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
What the vulnerability does
Missing Authorization vulnerability in WP Messiah Swiss Toolkit For WP swiss-toolkit-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Swiss Toolkit For WP: from n/a through <= 1.4.0.
Explanation of Vulnerability in Simple Terms
Swiss Toolkit For WP versions up to 1.4.0 lack proper authorization checks, allowing authenticated users with low privileges to trigger a denial-of-service condition. An attacker with a basic user account can make requests that degrade site availability. The vulnerability requires valid login credentials but no special interaction from other users.
What an attacker can do
Degrade site availability by making authenticated requests that consume resources or cause service disruption.
Potential impact on your site
Users may experience intermittent slowdowns or temporary unavailability if an authenticated attacker exploits this repeatedly.
Conditions required to exploit
Attacker must have a low-privilege user account (e.g., subscriber or contributor role) on the WordPress site.
Key dates
External resources
