WordPress <= 4.9.4 - Application Denial of Service (DoS) (unpatched)

Affects WordPresses

4.9.4
no known fix
4.9.3
no known fix
4.9.2
no known fix
4.9.1
no known fix
4.9
no known fix
4.8.5
no known fix
4.8.4
no known fix
4.8.3
no known fix
4.8.2
no known fix
4.8.1
no known fix
4.8
no known fix
4.7.9
no known fix
4.7.8
no known fix
4.7.7
no known fix
4.7.6
no known fix
4.7.5
no known fix
4.7.4
no known fix
4.7.3
no known fix
4.7.2
no known fix
4.7.1
no known fix
4.7
no known fix
4.6.10
no known fix
4.6.9
no known fix
4.6.8
no known fix
4.6.7
no known fix
4.6.6
no known fix
4.6.5
no known fix
4.6.4
no known fix
4.6.3
no known fix
4.6.2
no known fix
4.6.1
no known fix
4.6
no known fix
4.5.13
no known fix
4.5.12
no known fix
4.5.11
no known fix
4.5.10
no known fix
4.5.9
no known fix
4.5.8
no known fix
4.5.7
no known fix
4.5.6
no known fix
4.5.5
no known fix
4.5.4
no known fix
4.5.3
no known fix
4.5.2
no known fix
4.5.1
no known fix
4.5
no known fix
4.4.14
no known fix
4.4.13
no known fix
4.4.12
no known fix
4.4.11
no known fix
4.4.10
no known fix
4.4.9
no known fix
4.4.8
no known fix
4.4.7
no known fix
4.4.6
no known fix
4.4.5
no known fix
4.4.4
no known fix
4.4.3
no known fix
4.4.2
no known fix
4.4.1
no known fix
4.4
no known fix
4.3.15
no known fix
4.3.14
no known fix
4.3.13
no known fix
4.3.12
no known fix
4.3.11
no known fix
4.3.10
no known fix
4.3.9
no known fix
4.3.8
no known fix
4.3.7
no known fix
4.3.6
no known fix
4.3.5
no known fix
4.3.4
no known fix
4.3.3
no known fix
4.3.2
no known fix
4.3.1
no known fix
4.3
no known fix
4.2.19
no known fix
4.2.18
no known fix
4.2.17
no known fix
4.2.16
no known fix
4.2.15
no known fix
4.2.14
no known fix
4.2.13
no known fix
4.2.12
no known fix
4.2.11
no known fix
4.2.10
no known fix
4.2.9
no known fix
4.2.8
no known fix
4.2.7
no known fix
4.2.6
no known fix
4.2.5
no known fix
4.2.4
no known fix
4.2.3
no known fix
4.2.2
no known fix
4.2.1
no known fix
4.2
no known fix
4.1.22
no known fix
4.1.21
no known fix
4.1.20
no known fix
4.1.19
no known fix
4.1.18
no known fix
4.1.17
no known fix
4.1.16
no known fix
4.1.15
no known fix
4.1.14
no known fix
4.1.13
no known fix
4.1.12
no known fix
4.1.11
no known fix
4.1.10
no known fix
4.1.9
no known fix
4.1.8
no known fix
4.1.7
no known fix
4.1.6
no known fix
4.1.5
no known fix
4.1.4
no known fix
4.1.3
no known fix
4.1.2
no known fix
4.1.1
no known fix
4.1
no known fix
4.0.22
no known fix
4.0.21
no known fix
4.0.20
no known fix
4.0.19
no known fix
4.0.18
no known fix
4.0.17
no known fix
4.0.16
no known fix
4.0.15
no known fix
4.0.14
no known fix
4.0.13
no known fix
4.0.12
no known fix
4.0.11
no known fix
4.0.10
no known fix
4.0.9
no known fix
4.0.8
no known fix
4.0.7
no known fix
4.0.6
no known fix
4.0.5
no known fix
4.0.4
no known fix
4.0.3
no known fix
4.0.2
no known fix
4.0.1
no known fix
4.0
no known fix
3.9.23
no known fix
3.9.22
no known fix
3.9.21
no known fix
3.9.20
no known fix
3.9.19
no known fix
3.9.18
no known fix
3.9.17
no known fix
3.9.16
no known fix
3.9.15
no known fix
3.9.14
no known fix
3.9.13
no known fix
3.9.12
no known fix
3.9.11
no known fix
3.9.10
no known fix
3.9.9
no known fix
3.9.8
no known fix
3.9.7
no known fix
3.9.6
no known fix
3.9.5
no known fix
3.9.4
no known fix
3.9.3
no known fix
3.9.2
no known fix
3.9.1
no known fix
3.9
no known fix
3.8.25
no known fix
3.8.24
no known fix
3.8.23
no known fix
3.8.22
no known fix
3.8.21
no known fix
3.8.20
no known fix
3.8.19
no known fix
3.8.18
no known fix
3.8.17
no known fix
3.8.16
no known fix
3.8.15
no known fix
3.8.14
no known fix
3.8.13
no known fix
3.8.12
no known fix
3.8.11
no known fix
3.8.10
no known fix
3.8.9
no known fix
3.8.8
no known fix
3.8.7
no known fix
3.8.6
no known fix
3.8.5
no known fix
3.8.4
no known fix
3.8.3
no known fix
3.8.2
no known fix
3.8.1
no known fix
3.8
no known fix
3.7.25
no known fix
3.7.24
no known fix
3.7.23
no known fix
3.7.22
no known fix
3.7.21
no known fix
3.7.20
no known fix
3.7.19
no known fix
3.7.18
no known fix
3.7.17
no known fix
3.7.16
no known fix
3.7.15
no known fix
3.7.14
no known fix
3.7.13
no known fix
3.7.12
no known fix
3.7.11
no known fix
3.7.10
no known fix
3.7.9
no known fix
3.7.8
no known fix
3.7.7
no known fix
3.7.6
no known fix
3.7.5
no known fix
3.7.4
no known fix
3.7.3
no known fix
3.7.2
no known fix
3.7.1
no known fix
3.7
no known fix
3.6.1
no known fix
3.6
no known fix
3.5.2
no known fix
3.5.1
no known fix
3.5
no known fix
3.4.2
no known fix
3.4.1
no known fix
3.4
no known fix
3.3.3
no known fix
3.3.2
no known fix
3.3.1
no known fix
3.3
no known fix
3.2.1
no known fix
3.2
no known fix
3.1.4
no known fix
3.1.3
no known fix
3.1.2
no known fix
3.1.1
no known fix
3.1
no known fix
3.0.6
no known fix
3.0.5
no known fix
3.0.4
no known fix
3.0.3
no known fix
3.0.2
no known fix
3.0.1
no known fix
3.0
no known fix
2.9.2
no known fix
2.9.1
no known fix
2.9
no known fix
2.8.6
no known fix
2.8.5
no known fix
2.8.4
no known fix
2.8.3
no known fix
2.8.2
no known fix
2.8.1
no known fix
2.8
no known fix
2.7.1
no known fix
2.7
no known fix
2.6.5
no known fix
2.6.3
no known fix
2.6.2
no known fix
2.6.1
no known fix
2.6
no known fix
2.5.1
no known fix
2.5
no known fix
2.3.3
no known fix
2.3.2
no known fix
2.3.1
no known fix
2.3
no known fix
2.2.3
no known fix
2.2.2
no known fix
2.2.1
no known fix
2.2
no known fix
2.1.3
no known fix
2.1.2
no known fix
2.1.1
no known fix
2.1
no known fix
2.0.11
no known fix
2.0.10
no known fix
2.0.9
no known fix
2.0.8
no known fix
2.0.7
no known fix
2.0.6
no known fix
2.0.5
no known fix
2.0.4
no known fix
2.0.3
no known fix
2.0.2
no known fix
2.0.1
no known fix
2.0
no known fix
1.5.2
no known fix
1.5.1.3
no known fix
1.5.1.2
no known fix
1.5.1.1
no known fix
1.5.1
no known fix
1.5
no known fix
1.2.2
no known fix
1.2.1
no known fix
1.2
no known fix
1.0.2
no known fix
1.0.1
no known fix
1.0
no known fix
0.711
no known fix
0.72
no known fix
0.71
no known fix
0.70
no known fix

References

CVE 2018-6389
URL https://baraktawily.blogspot.fr/2018/02/how-to-dos-29-of-world-wide-websites.html
URL https://github.com/quitten/doser.py
URL https://thehackernews.com/2018/02/wordpress-dos-exploit.html

Classification

Type DOS
CWE CWE-400

Miscellaneous

Submitter ethicalhack3r
Submitter Website https://dewhurstsecurity.com/
Submitter Twitter ethicalhack3r
Views 18898
Verified No
WPVDB ID 9021

Timeline

Publicly Published 2018-02-05 (about 2 years ago)
Added 2018-02-05 (about 2 years ago)
Last Updated 2019-11-01 (4 months ago)

Our Other Services

Online WordPress Vulnerability Scanner WPScan WordPress Security Plugin