Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-13926

WP-Syntax <= 1.2 - Author+ Potential ReDoS

Description

The WP-Syntax WordPress plugin through 1.2 does not properly handle input, allowing an attacker to create a post containing a large number of tags, thereby exploiting a catastrophic backtracking issue in the regular expression processing to cause a DoS.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown WP-Syntax

Default version status: affected

  • 0 to ≤ 1.2affected

References