CVE-2024-12579 - CVE House
Back to Database
Status published Medium CVE-2024-12579

Minify HTML <= 2.1.10 - - Regular Expressions Denial of Service

Vulnerability Description

The Minify HTML plugin for WordPress is vulnerable to Regular Expression Denial of Service (ReDoS) in all versions up to, and including, 2.1.10. This is due to processing user-supplied input as a regular expression. This makes it possible for unauthenticated attackers to create comments that can cause catastrophic backtracking and break pages.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-12579

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Pierre Rudloff

References

More from teckel

View All →
CVE-2023-1068
Download Read More Excerpt Link <= 1.6.0 - Cross-Site Request Forgery to Settings Update
Medium 4.3

Affected Vendor

Affected Software

Minify HTML
Vulnerable Versions:
0

Timeline

Official Publish: December 13th, 2024
Last Modified: April 8th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weaknesses (CWE)

CWE-400

MITRE ATT&CK TTPs

T1499 Endpoint Denial of Service
Impact
T1498 Network Denial of Service
Impact