WordPress before version 2.8.5 has a security issue which could allow remote attackers to cause a denial of service. This could lead to an increased amount of CPU usage and cause the server to hang. This is caused by a combination of a long title parameter and a charset parameter made up of many comma separated “UTF-8” sections and is related to the “mb_convert_encoding” function in PHP.