Description

WordPress allows remote attackers to cause a denial of service (bandwidth or thread consumption) via pingback service calls with a source URI that corresponds to a file with a binary content type, which is downloaded even though it cannot contain usable pingback data.

Remediation

References

CVE-2007-0540

Related Vulnerabilities

WordPress Plugin File Manager Unspecified Vulnerability (5.0.0)

WordPress Plugin Ultimate Tag Cloud Widget Unspecified Vulnerability (2.3)

Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-3992)

CubeCart Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3724)

WordPress Plugin The Easiest WordPress Media Manager-WP Media Manager Lite includes Backdoor [Only if downloaded via the vendor website] (1.1.2)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2007-0540