Easy-to-make DDOS in wordpress + woocommerce + cloudpanel (10 req/second)

[DAVIAMERICO242]

CloudPanel version(s) affected

2.5.4

Description

When making more than 10 requests/second for any wordpress site + woocommerce in cloudpanel then site is down.

How to reproduce

1 - Start wordpress with cloudpanel.

2 - Install woocommerce

3 - Create a few products with images below 500kb

4 - Enter in the main page

5 - Paste this in javascript console (on your webbrowser):

setInterval(() => {
fetch('https://yourwordpress.com/', {
cache: 'no-store'
});
}, 100);

After few seconds the site is down, and php fpm process must to be restarted.

Possible Solution

No response

Additional Context

No response