CVE-2024-13926

Description

The WP-Syntax WordPress plugin through 1.2 does not properly handle input, allowing an attacker to create a post containing a large number of tags, thereby exploiting a catastrophic backtracking issue in the regular expression processing to cause a DoS.

Reserved 2025-03-13 | Published 2025-04-19 | Updated 2025-04-21 | Assigner WPScan

Problem types

CWE-400 Uncontrolled Resource Consumption

Product status

Default status
affected

Any version
affected

Credits

Pierre Rudloff finder

WPScan coordinator

References

wpscan.com/...rability/b5f0092e-7cd5-412f-a8ea-7bd4a8bf86d2/ exploit vdb-entry technical-description

cve.org (CVE-2024-13926)

nvd.nist.gov (CVE-2024-13926)

Download JSON