Vulnerability · Published Apr 19, 2025 · Assigned by WPScan

CVE-2024-13926WP-Syntax <= 1.2 - Author+ Potential ReDoS

High 7.5

In plain English

A high-severity security flaw in WP-Syntax from Unknown. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 43% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)0.5%top 56.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

The WP-Syntax WordPress plugin through 1.2 does not properly handle input, allowing an attacker to create a post containing a large number of tags, thereby exploiting a catastrophic backtracking issue in the regular expression processing to cause a DoS.

Affected products (as reported)

Vendor	Product	Versions
Unknown	WP-Syntax	0 – through 1.2

References

https://wpscan.com/vulnerability/b5f0092e-7cd5-412f-a8ea-7bd4a8bf86d2/ exploit, vdb-entry, technical-description