WordPress 4.5.3 - Authenticated Denial of Service (DoS)

Affects WordPress

fixed in version 4.6

References

CVE 2016-6896
CVE 2016-6897
URL http://seclists.org/fulldisclosure/2016/Aug/98
URL https://sumofpwn.nl/advisory/2016/path_traversal_vulnerability_in_wordpress_core_ajax_handlers.html
URL https://core.trac.wordpress.org/ticket/37490

Classification

Type DOS
CWE CWE-400

Miscellaneous

Submitter ethicalhack3r
Submitter Website https://dewhurstsecurity.com/
Submitter Twitter ethicalhack3r
Views 7852
Verified No
WPVDB ID 8606

Timeline

Publicly Published 2016-08-20 (almost 3 years ago)
Added 2016-08-20 (almost 3 years ago)
Last Updated 2018-08-29 (12 months ago)

Our Other Services

Online WordPress Vulnerability Scanner WPScan WordPress Security Plugin