CVE-2024-13926

{"id": "CVE-2024-13926", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2025-04-19T06:15:18.347", "references": [{"url": "https://wpscan.com/vulnerability/b5f0092e-7cd5-412f-a8ea-7bd4a8bf86d2/", "tags": ["Exploit", "Third Party Advisory"], "source": "[email protected]"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-1333"}]}], "descriptions": [{"lang": "en", "value": "The WP-Syntax WordPress plugin through 1.2 does not properly handle input, allowing an attacker to create a post containing a large number of tags, thereby exploiting a catastrophic backtracking issue in the regular expression processing to cause a DoS."}, {"lang": "es", "value": "El complemento WP-Syntax para WordPress hasta la versi\u00f3n 1.2 no gestiona adecuadamente la entrada, lo que permite que un atacante cree una publicaci\u00f3n que contenga una gran cantidad de etiquetas, explotando as\u00ed un problema de retroceso catastr\u00f3fico en el procesamiento de expresiones regulares para provocar un DoS."}], "lastModified": "2025-05-28T15:50:23.510", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:connections-pro:wp-syntax:*:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "D38E570C-54B5-429F-8A99-E9267A7EB1F1", "versionEndIncluding": "1.2"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}