漏洞描述
In WordPress through 4.9.2, unauthenticated attackers can cause a denial of service (resource consumption) by using the large list of registered .js files (from wp-includes/script-loader.php) to construct a series of requests to load every file many times.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
www.securityfocus.comhttp://www.securityfocus.com/bid/103060↗github.comhttps://github.com/WazeHell/CVE-2018-6389↗www.securitytracker.comhttp://www.securitytracker.com/id/1040347↗baraktawily.blogspot.frhttps://baraktawily.blogspot.fr/2018/02/how-to-dos-29-of-world-wide-websites.html↗github.comhttps://github.com/UltimateHackers/Shiva↗wpvulndb.comhttps://wpvulndb.com/vulnerabilities/9021↗