WordPress has a database repair and optimization mode that can be activated by setting WP_ALLOW_REPAIR to true in the
configuration.
If activated, the repair page can be accessed by any user, authenticated or not. This makes sense because if the database is corrupted, the
authentication mechanism might not work.
Malicious users could trigger this potentially costly operation repeatadly slowing down the website, and making it unavailable.