Denial of Service Exploit Plugin
Posted on May 5th, 2006 by admin
Yet another problem in a series of security flaws for Wordpress found. This security advisory includes Proof of Concept code that can break your site by registering for accounts over and over until your site drowns in a bucket of ones and zeros.
In what appears to be the only sane response I’ve seen so far, here is a simple plugin that will protect your blog from malicious registrations and brute force password attempts. This plugin demonstrates how easy it is to fix the coding errors in Wordpress which allow this to happen in the first place.
