Caused major issues

After updating to the latest version of Woocommerce 3.6.4 a client installed the Woo Admin plugin by following the prompt.
He left the Woo admin screen open today and it brought the site to it’s knees. The plugin created 14000 requests (from hosts error logs) to WP Json in a matter of a few hours, causing 100% cpu usage and crashed the site. Basically self DDOS.

Here is an example of one of the requests –
“GET /wp-json/wc/v4/admin/notes?order=desc&orderby=date&page=1&per_page=1&type=info%2Cwarning&_locale=user HTTP/2”

needless to say i’ve deleted the plugin!
Hope this is sorted before 3.7 – I can’t add anymore info to this i’m afraid

• This topic was modified 3 years, 10 months ago by monowebdesign.