What’s Vulnerable › Vulnerabilities

CVE-2024-13896: WP-GeSHi-Highlight <= 1.4.3 - Author+ ReDoS

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-04-10 · updated 2026-06-17
• Weakness: CWE-1333

Description

The WP-GeSHi-Highlight — rock-solid syntax highlighting for 259 languages WordPress plugin through 1.4.3 processes user-supplied input as a regular expression via the wp_geshi_filter_replace_code() function, which could lead to Regular Expression Denial of Service (ReDoS) issue

Affected products

• WP-GeSHi-Highlight — rock-solid syntax highlighting for 259 languages: through 1.4.3

References

• https://wpscan.com/vulnerability/b8b622ea-e090-45ad-8755-b050fc055231/
• https://wpscan.com/vulnerability/b8b622ea-e090-45ad-8755-b050fc055231/

Get alerted when CVE-2024-13896 or the next vulnerability affects your stack