WP-Syntax, CVE-2024-13926

CVE, Research URL: CVE-2024-13926
Home page URL: Security reports for WP-Syntax
Application: WP-Syntax
Published on: Apr 19, 2025
Research Description: The WP-Syntax WordPress plugin through 1.2 does not properly handle input, allowing an attacker to create a post containing a large number of tags, thereby exploiting a catastrophic backtracking issue in the regular expression processing to cause a DoS.
Affected versions: Min -, max 1.2.
Status: vulnerable