CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in activity-log.com Profiler - What Slowing Down Your WP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Profiler - What Slowing Down Your WP: from n/a through 1.0.0.
Explanation of Vulnerability in Simple Terms
The Profiler plugin for WordPress does not properly check user permissions before allowing access to sensitive profiling data. An unauthenticated attacker can read and modify performance metrics and configuration without authorization. This affects all versions up to 1.0.0. Update to a version newer than 1.0.0 when available.
What an attacker can do
Read and modify WordPress performance profiling data without logging in.
Potential impact on your site
Attackers can view and alter site performance data, potentially exposing configuration details or disrupting monitoring.
Conditions required to exploit
Network access to the WordPress site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
