iubenda cookie consent plugin allows denial of service via unlimited HTTP resource allocation
A WordPress cookie consent plugin can stop your site.
Summary
Missing limits on resource allocation in the iubenda cookie consent WordPress plugin let an attacker stop a site with HTTP requests. Versions through 3.13.6 are affected.
Affected when
- iubenda plugin installed on WordPress
What to do
Update the iubenda plugin to 3.13.7 or later.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen