CVE-2014-9034

This exploit demonstrates a denial-of-service (DoS) vulnerability in WordPress versions prior to 4.0.1 by sending a large payload to the login endpoint, causing CPU and memory exhaustion. The PoC uses a crafted request with an excessively long password field to overwhelm the server.

This PoC exploits a DoS vulnerability in WordPress <= v4.0 by sending multiple POST requests with an excessively long password field, causing resource exhaustion. It uses cURL multi-handling to simulate concurrent requests.

This Metasploit module exploits CVE-2014-9034, a DoS vulnerability in WordPress caused by improper handling of long passwords during hashing. It sends multiple login requests with extremely long passwords to consume CPU resources.