WordPress Profiler Plugin Missing Authorization Vulnerability Allowing Access Control Exploitation

A missing authorization vulnerability has been identified in the WordPress Profiler plugin, specifically in the 'What Slowing Down Your WP' version range prior to and including 1.0.0. This vulnerability arises from incorrectly configured access control security levels, which can be exploited to perform actions without the necessary permissions.

Impact

Exploitation of this vulnerability could lead to unauthorized users being able to perform actions that require higher privileges, due to the lack of proper authorization checks.

Remediation

Users of the WordPress Profiler plugin 'What Slowing Down Your WP' version 1.0.0 and prior should update to the latest version. Patchstack has also issued a virtual patch to mitigate this vulnerability by blocking attacks until an official fix is available.