PT-2022-23007

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 6.1.1 WordPress versions 4.1 Description The issue is related to an unauthenticated blind SSRF in the pingback feature of WordPress. This occurs due to a TOCTOU Time-of-Check-to-Time-of-Use race condition between th...

DEBIAN-CVE-2007-0540

WordPress allows remote attackers to cause a denial of service bandwidth or thread consumption via pingback service calls with a source URI that corresponds to a file with a binary content type, which is downloaded even though it cannot contain usable pingback data...