• Manual confirmation is required for this alert.
  
  This script is using the PHP function preg_replace() on user input. This is not recommended as it can lead to various vulnerabilities. Consult "Web references" for more information about this problem.
  
  The e modifier makes preg_replace() treat the replacement parameter as PHP code after the appropriate references substitution is done. If the regex pattern and the replacement strings are controlled by the user this can conduct to PHP code execution.

• It is not recommended to use preg_replace() on user input.

• • The unexpected dangers of preg_replace()
  • preg_replace

• 

• CWE-20

• Denial Of Service Abuse Of Functionality

• WordPress 4.7.x Denial of Service Vulnerability (4.7 - 4.7.9)
• Chargen service running
• PHP hangs on parsing particular strings as floating point number
• WordPress plugin Custom Contact Forms critical vulnerability
• Long password denial of service