Description
In WordPress before 4.7.3, there is cross-site request forgery (CSRF) in Press This (wp-admin/includes/class-wp-press-this.php), leading to excessive use of server resources. The CSRF can trigger an outbound HTTP request for a large file that is then parsed by Press This.
Remediation
References
Related Vulnerabilities
WordPress Plugin Opal Estate Cross-Site Request Forgery (1.6.11)
Apache HTTP Server NULL Pointer Dereference Vulnerability (CVE-2021-31618)
Joomla URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2023-23754)
Drupal Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2022-25277)
Chamilo Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-4226)