CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
What the vulnerability does
Missing Authorization vulnerability in SiteLock SiteLock Security – WP Hardening, Login Security & Malware Scans sitelock allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SiteLock Security – WP Hardening, Login Security & Malware Scans: from n/a through <= 5.0.1.
Explanation of Vulnerability in Simple Terms
The SiteLock Security plugin for WordPress contains an authorization flaw that allows authenticated users with low privileges to trigger a denial-of-service condition. An attacker with a valid WordPress account can make requests that degrade site availability. The vulnerability affects versions up to 5.0.1 and requires valid login credentials to exploit.
What an attacker can do
An authenticated attacker can make requests that degrade or disrupt site availability.
Potential impact on your site
A malicious user or compromised low-privilege account can cause temporary site slowdowns or unavailability.
Conditions required to exploit
Attacker must have a valid WordPress user account with low-level privileges.
Key dates
External resources
