The WP-Syntax WordPress plugin through 1.2 does not properly handle input, allowing an attacker to create a post containing a large number of tags, thereby exploiting a catastrophic backtracking issue in the regular expression processing to cause a DoS.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://wpscan.com/vulnerability/b5f0092e-7cd5-412f-a8ea-7bd4a8bf86d2/ | Exploit Third Party Advisory |
Configurations
History
28 May 2025, 15:50
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-1333 | |
| First Time |
Connections-pro wp-syntax
Connections-pro |
|
| CPE | cpe:2.3:a:connections-pro:wp-syntax:*:*:*:*:*:wordpress:*:* | |
| References | () https://wpscan.com/vulnerability/b5f0092e-7cd5-412f-a8ea-7bd4a8bf86d2/ - Exploit, Third Party Advisory |
19 Apr 2025, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-04-19 06:15
Updated : 2025-05-28 15:50
NVD link : CVE-2024-13926
Mitre link : CVE-2024-13926
JSON object : View
Products Affected
connections-pro
- wp-syntax
CWE
CWE-1333
Inefficient Regular Expression Complexity