Exploiting authorization by nonce in WordPress plugins

HTTP/2 Continuation Flood: Technical Details