Vulnerability in N/a
CVE-2018-6389
In WordPress through 4.9.2, unauthenticated attackers can cause a denial of service (resource consumption) by using the large list of registered .js files (from wp-includes/script-loader.php) to construct a series of requests to load every…
EPSS: 0.875 (99.5th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- 103060 (vdb-entry, x_refsource_BID)
- wpvulndb.com/vulnerabilities/9021 (x_refsource_MISC)
- 43968 (exploit, x_refsource_EXPLOIT-DB)
- baraktawily.blogspot.fr/2018/02/how-to-dos-29-of-world-wide-websites.html (x_refsource_MISC)
- 1040347 (vdb-entry, x_refsource_SECTRACK)
- thehackernews.com/2018/02/wordpress-dos-exploit.html (x_refsource_MISC)
- github.com/WazeHell/CVE-2018-6389 (x_refsource_MISC)
- github.com/UltimateHackers/Shiva (x_refsource_MISC)
Frequently asked questions
- What is CVE-2018-6389?
- CVE-2018-6389 is a vulnerability in N/a. Published 2018-02-06.
- Is CVE-2018-6389 known to be exploited?
- 141 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.