Description
WordPress is prone to a Denial of Service vulnerability which can be exploited by malicious people to cause the affected website to consume memory and CPU resources, thus denying service to legitimate users. WordPress versions prior to 3.7.4, 3.8.4 and 3.9.2 are vulnerable.
Remediation
Update to WordPress version 3.7.4, 3.8.4, 3.9.2 or latest
References
http://www.breaksec.com/?p=6362
http://codex.wordpress.org/Version_3.7.4
Related Vulnerabilities
WordPress 'cat' Parameter SQL Injection Vulnerability (1.5 - 1.5.1.1)
WordPress Plugin Posts in Page Local File Inclusion (1.2.4)
WordPress Plugin Events Registration with PayPal IPN Multiple SQL Injection Vulnerabilities (2.1.2)
WordPress Plugin wpForo Forum Cross-Site Scripting (1.4.11)
WordPress Plugin Grand Flagallery-Photo Gallery 'facebook.php' Cross-Site Scripting (1.56)