WordPress is prone to a Denial of Service vulnerability which can be exploited by malicious people to cause the affected website to consume memory and CPU resources, thus denying service to legitimate users. WordPress versions ranging from 0.70 and up to (and including) 3.6.1 are vulnerable.
Evaluate and apply the suggested patch
WordPress Plugin KJM Admin Notices Cross-Site Scripting (2.0.1)
WordPress Plugin Responsive Category Slider Cross-Site Scripting (1.0)
WordPress Plugin Membership Simplified Arbitrary File Download (1.58)
WordPress Plugin BuddyPress Cross-Site Scripting (22.214.171.124)