### [CVE-2018-6389](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6389)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

In WordPress through 4.9.2, unauthenticated attackers can cause a denial of service (resource consumption) by using the large list of registered .js files (from wp-includes/script-loader.php) to construct a series of requests to load every file many times.

### POC

#### Reference
- https://baraktawily.blogspot.fr/2018/02/how-to-dos-29-of-world-wide-websites.html
- https://baraktawily.blogspot.fr/2018/02/how-to-dos-29-of-world-wide-websites.html
- https://github.com/WazeHell/CVE-2018-6389
- https://github.com/WazeHell/CVE-2018-6389
- https://thehackernews.com/2018/02/wordpress-dos-exploit.html
- https://thehackernews.com/2018/02/wordpress-dos-exploit.html
- https://www.exploit-db.com/exploits/43968/
- https://www.exploit-db.com/exploits/43968/

#### Github
- https://github.com/0xT11/CVE-POC
- https://github.com/0xsaju/Awesome-Bugbounty-Writeups
- https://github.com/302Found1/Awesome-Writeups
- https://github.com/6lyxt/collection-of-exploits
- https://github.com/ARPSyndicate/cvemon
- https://github.com/ARPSyndicate/kenzer-templates
- https://github.com/AdamLBS/Wordpress-installer
- https://github.com/Adelittle/Wordpressz_Dos_CVE_2018_6389
- https://github.com/Afetter618/WordPress-PenTest
- https://github.com/BiswajeetRay7/Loadscript-payload
- https://github.com/BlackRouter/cve-2018-6389
- https://github.com/CeCe2018/Codepath
- https://github.com/CeCe2018/Codepath-Week-7-Alternative-Assignment-Essay
- https://github.com/CnHack3r/Penetration_PoC
- https://github.com/Daas335b/Codepath.week7
- https://github.com/Daas335b/Week-7
- https://github.com/DeyaaMuhammad/WPDOSLoader
- https://github.com/EchoGin404/-
- https://github.com/EchoGin404/gongkaishouji
- https://github.com/El-Palomo/DerpNStink
- https://github.com/Elsfa7-110/kenzer-templates
- https://github.com/Fa1c0n35/Awesome-Bugbounty-Writeups
- https://github.com/Hacker-Fighter001/Bug-Bounty-Hunter-Articles
- https://github.com/ImranTheThirdEye/Awesome-Bugbounty-Writeups
- https://github.com/ItinerisLtd/trellis-cve-2018-6389
- https://github.com/JavierOlmedo/wordpress-cve-2018-6389
- https://github.com/Jetserver/CVE-2018-6389-FIX
- https://github.com/JulienGadanho/cve-2018-6389-php-patcher
- https://github.com/Mr-xn/Penetration_Testing_POC
- https://github.com/Neelakandan-A/BugBounty_CheatSheet
- https://github.com/Prabirrimi/Awesome-Bugbounty-Writeups
- https://github.com/Prodrious/writeups
- https://github.com/R3dg0/writeups
- https://github.com/RClueX/Hackerone-Reports
- https://github.com/Saidul-M-Khan/Awesome-Bugbounty-Writeups
- https://github.com/Scatter-Security/wordpressure
- https://github.com/SexyBeast233/SecBooks
- https://github.com/Shamsuzzaman321/Wordpress-Exploit-AiO-Package
- https://github.com/SunDance29/for-learning
- https://github.com/Tanvi20/Week-7-Alternative-Assignment-wp-cve
- https://github.com/TheBountyBox/Awesome-Writeups
- https://github.com/Tyro-Shan/gongkaishouji
- https://github.com/WazeHell/CVE-2018-6389
- https://github.com/YIXINSHUWU/Penetration_Testing_POC
- https://github.com/YemiBeshe/Codepath-WP1
- https://github.com/ZTK-009/Penetration_PoC
- https://github.com/Zazzzles/Wordpress-DOS
- https://github.com/abuzafarhaqq/bugBounty
- https://github.com/ajino2k/Awesome-Bugbounty-Writeups
- https://github.com/alessiogilardi/PoC---CVE-2018-6389
- https://github.com/alexbieber/Bug_Bounty_writeups
- https://github.com/alexjasso/Project_7-WordPress_Pentesting
- https://github.com/allwinnoah/CyberSecurity-Tools
- https://github.com/amankapoor/trellis-wordpress-starter-kit
- https://github.com/amit-pathak009/CVE-2018-6389-FIX
- https://github.com/armaanpathan12345/WP-DOS-Exploit-CVE-2018-6389
- https://github.com/aryanicc/cybertools
- https://github.com/blitz-cmd/Bugbounty-writeups
- https://github.com/bogdanovist2061/Project-7---WordPress-Pentesting
- https://github.com/bot8080/awesomeBugbounty
- https://github.com/bugrider/devanshbatham-repo
- https://github.com/chalern/Pentest-Tools
- https://github.com/choudharyrajritu1/Bug_Bounty-POC
- https://github.com/crpytoscooby/resourses_web
- https://github.com/cyberguideme/Tools
- https://github.com/cybershadowvps/Awesome-Bugbounty-Writeups
- https://github.com/d4n-sec/d4n-sec.github.io
- https://github.com/dalersinghmti/writeups
- https://github.com/devanshbatham/Awesome-Bugbounty-Writeups
- https://github.com/developer3000S/PoC-in-GitHub
- https://github.com/dipesh259/Writeups
- https://github.com/dsfau/wordpress-CVE-2018-6389
- https://github.com/ducducuc111/Awesome-Bugbounty-Writeups
- https://github.com/fakedob/tvsz
- https://github.com/haminsky/Week7-WP
- https://github.com/harrystaley/CSCI4349_Week9_Honeypot
- https://github.com/harrystaley/TAMUSA_CSCI4349_Week9_Honeypot
- https://github.com/hasee2018/Penetration_Testing_POC
- https://github.com/hectorgie/PoC-in-GitHub
- https://github.com/holmes-py/reports-summary
- https://github.com/huike007/penetration_poc
- https://github.com/huike007/poc
- https://github.com/ianxtianxt/CVE-2018-6389
- https://github.com/imhunterand/hackerone-publicy-disclosed
- https://github.com/jguerrero12/WordPress-Pentesting
- https://github.com/jk-cybereye/codepath-week7
- https://github.com/kehcat/CodePath-Fall
- https://github.com/khast3x/Offensive-Dockerfiles
- https://github.com/knqyf263/CVE-2018-6389
- https://github.com/kurrishashi/Awesome-Bugbounty-Writeups
- https://github.com/lions2012/Penetration_Testing_POC
- https://github.com/lnick2023/nicenice
- https://github.com/m3ssap0/wordpress_cve-2018-6389
- https://github.com/mudhappy/Wordpress-Hack-CVE-2018-6389
- https://github.com/nobody246/wordPressDOSPOC
- https://github.com/oleksandrbi/CodePathweek7
- https://github.com/password520/Penetration_PoC
- https://github.com/paulveillard/cybersecurity-tools
- https://github.com/piyushimself/Bugbounty_Writeups
- https://github.com/plancoo/Bugbounty_Writeups
- https://github.com/qazbnm456/awesome-cve-poc
- https://github.com/rastating/modsecurity-cve-2018-6389
- https://github.com/s0md3v/Shiva
- https://github.com/safebuffer/CVE-2018-6389
- https://github.com/salihkiraz/Web-Uygulamasi-Sizma-Testi-Kontrol-Listesi
- https://github.com/sreechws/Bou_Bounty_Writeups
- https://github.com/thechrono13/PoC---CVE-2018-6389
- https://github.com/vineetkia/Wordpress-DOS-Attack-CVE-2018-6389
- https://github.com/webexplo1t/BugBounty
- https://github.com/winterwolf32/CVE-S---Penetration_Testing_POC-
- https://github.com/xbl3/Awesome-Bugbounty-Writeups_devanshbatham
- https://github.com/xbl3/awesome-cve-poc_qazbnm456
- https://github.com/xuetusummer/Penetration_Testing_POC
- https://github.com/yedada-wei/-
- https://github.com/yedada-wei/gongkaishouji
- https://github.com/yolabingo/wordpress-fix-cve-2018-6389
- https://github.com/zeev-mindali/cyber
- https://github.com/zeev-mindali/cyber-security-tools