CVE-2023-22622
Description
WordPress through 6.1.1 depends on unpredictable client visits to cause wp-cron.php execution and the resulting security updates, and the source code describes "the scenario where a site may not receive enough visits to execute scheduled tasks in a timely manner," but neither the installation guide nor the security guide mentions this default behavior, or alerts the user about security risks on installations with very few visits.
- CVSS Version 3.1
nvd
CVE ID: CVE-2023-22622
Base Score: 5.3
Base Severity: MEDIUM
Vector String:CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Impact Score: 3.6
Exploitability Score: 1.6
Proof Of Concept
michael-david-fry
Python Script that will DoS a WP server that is utilizing WP-CRON
Refrence: GitHub
Refrence: NVD