And what about CVE-2018-6389, WordPress sites can be DoS-ed freely and seems that they don't go to fix this.