Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
WordPress allows remote attackers to cause a denial of service (bandwidth or thread consumption) via pingback service calls with a source URI that corresponds to a file with a binary content type, which is downloaded even though it cannot contain usable pingback data.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Wordpress Pingback SourceURI 拒绝服务和信息泄露漏洞
Vulnerability Description
WordPress允许远程攻击者借助带有源URI的pingback服务调用，来引起拒绝服务攻击(带宽或thread损耗)。该源URI与一个带有二进制的内容形式的文件相一致。即使该文件没有包含有用的pingback数据，它也会被下载。
CVSS Information
N/A
Vulnerability Type
N/A