CVE-2018-6389

# CVE-2018-6389 WordPress Exploit

CVE-2018-6389 Exploit Can Down Any WordPress site under 4.9.3

The flaw affects the *load-scripts.php* WordPress script, it receives a parameter called load[]

## About PoC
A simple Script In Python With threading could allow anyone to take down most WordPress websites with single machine

**脚本github获取**

### Info

Can Down Any Website with Tested WordPress versions

* Tested : WordPress (Version 4.9.2)
* Tested : WordPress (Version 4.9.1)

“`
Note : I Am Not The Author Of the Exploit
“`

## Ref

* [PoC](/static/baige/01-CMS漏洞/Wordpress/https://www.youtube.com/watch?v=nNDsGTalXS0) – Youtube
* [ Barak Tawily ](/static/baige/01-CMS漏洞/Wordpress/https://baraktawily.blogspot.com/2018/02/how-to-dos-29-of-world-wide-websites.html) – Blog