VDB
DEBIAN-CVE-2014-5266
DEBIAN-CVE-2014-5266
PUBLISHED
CVSS 8.699999809265137 HIGH
The Incutio XML-RPC (IXR) Library, as used in WordPress before 3.9.2 and Drupal 6.x before 6.33 and 7.x before 7.31, does not limit the number of elements in an XML document, which allows remote attackers to cause a denial of service (CPU consumption) via a large document, a different vulnerability than CVE-2014-5265.
Risk Scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:14 | wordpress | 0 |
| Debian:12 | wordpress | 0, 0, 0 |
| Debian:11 | wordpress | 0, 0, 0 |
| Debian:13 | wordpress | 0, 0, 0 |
Timeline
- Aug 18, 2014 CVE Published
- May 7, 2026 CVE Updated