Description
WordPress before 2.0.5 does not properly store a profile containing a string representation of a serialized object, which allows remote authenticated users to cause a denial of service (application crash) via a string that represents a (1) malformed or (2) large serialized object, because the object triggers automatic unserialization for display.
Remediation
References
Related Vulnerabilities
WordPress Plugin RSS Includes Pages Unspecified Vulnerability (3.1)
Artifactory Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-65618)
Plone CMS Incorrect Default Permissions Vulnerability (CVE-2024-22889)
WordPress Plugin All-in-One WP Migration Multiple Cross-Site Request Forgery Vulnerabilities (7.1)