wazehell / cve-2018-6389

CVE-2018-6389 Exploit In WordPress DoS

CVE-2018-6389 Wordpress Exploit

CVE-2018-6389 Exploit Can Down Any Wordpress site under 4.9.3
The flaw affects the load-scripts.php WordPress script, it receives a parameter called load[]

About PoC

A simple Script In Python With threading could allow anyone to take down most WordPress websites with single machine

Info

Can Down Any Website with Tested Wordpress versions

• Tested : WordPress (Version 4.9.2)
• Tested : WordPress (Version 4.9.1)

Note : I Am Not The Author Of the Exploit 

Ref

• PoC - Youtube
• Barak Tawily - Blog

cve-2018-6389's Issues

Solving some code errors

Line 13: host = raw_input("Enter Target Url :") change for host = input("Enter Target Url :")
Line 18: tw = input("Threads Number avg 5000 :") change for tw = int(input("Threads Number avg 5000 :"))