WordPress core - Denial of Service via Cross Site Request Forgery

How it was found

Hello,

I've discovered a Denial of Service vulnerability in WordPress. My advisory can be found in the attachment in text format. If there are any questions please let me know, I'm happy to help.

The vulnerability was discovered during a month long security project to find vulnerabilities in WordPress and WordPress plugins. For more information about the project see: https://sumofpwn.nl

With kind regards,

Sipke