Main
Vulnerability Database
Exploits
ID:3911 - Exploit for Data Handling in WordPress - CVE-2014-9034
ID:3911 - Exploit for Data Handling in WordPress - CVE-2014-9034
Published: August 9, 2020
Vulnerability identifier: #VU41059
Vulnerability risk: Medium
CVE-ID: CVE-2014-9034
CWE-ID: CWE-19
Exploitation vector: Remote access
Vulnerable software:
WordPress
WordPress
Link to public exploit:
Vulnerability description
The vulnerability allows a remote non-authenticated attacker to perform service disruption.
wp-includes/class-phpass.php in WordPress before 3.7.5, 3.8.x before 3.8.5, 3.9.x before 3.9.3, and 4.x before 4.0.1 allows remote attackers to cause a denial of service (CPU consumption) via a long password that is improperly handled during hashing, a similar issue to CVE-2014-9016.
Remediation
Install update from vendor's website.