WordPress Vulnerabilities
WP < 7.1.3 - Contributor+ DoS via Block Editor URL Details
Description
WordPress does not correctly handle some malformed relative URL paths while resolving them in some cases, which could allow users with Contributor-level access and above to trigger an uncontrolled loop and cause a denial of service through server worker exhaustion.
Affects WordPress
References
Miscellaneous
Original Researcher
Anthropic
Verified
Yes
WPVDB ID
Timeline
Publicly Published
2026-10-06 (about 25 days ago)
Added
2026-10-06 (about 24 days ago)
Last Updated
2026-10-06 (about 24 days ago)