WordPress CVEs

Description

The WP-Syntax WordPress plugin through 1.2 does not properly handle input, allowing an attacker to create a post containing a large number of tags, thereby exploiting a catastrophic backtracking issue in the regular expression processing to cause a DoS.

Affected WordPress components

• wp-syntax Plugin · wp-syntax
  Confirmed match Homeless
  Up to and including 1.2
  View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

• Unknown WP-Syntax — Up to and including 1.2
• connections-pro wp-syntax — Up to and including 1.2

References

• wpscan.com https://wpscan.com/vulnerability/b5f0092e-7cd5-412f-a8ea-7bd4a8bf86d2/ Exploit, Third Party Advisory
• nvd.nist.gov Official NVD record