Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-12579

Minify HTML <= 2.1.10 - - Regular Expressions Denial of Service

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Wordfence

Description

The Minify HTML plugin for WordPress is vulnerable to Regular Expression Denial of Service (ReDoS) in all versions up to, and including, 2.1.10. This is due to processing user-supplied input as a regular expression. This makes it possible for unauthenticated attackers to create comments that can cause catastrophic backtracking and break pages.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

teckel Minify HTML

Default version status: unaffected

  • 0 to ≤ 2.1.10affected

References