Today, it’s more of the same – WordPress/Drupal gets to be the flavour of the moment with a memory DoS via XMLRPC (again). This time, not a brute force but a memory expansion bomb.
Full details below:
http://mashable.com/2014/08/06/wordpress-xml-blowup-dos/