Lucene search
K

4 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 9:27 a.m.12 views

CVE-2024-12601

The Calculated Fields Form plugin for WordPress is vulnerable to Denial of Service in all versions up to, and including, 5.2.63. This is due to unlimited height and width parameters for CAPTCHA images. This makes it possible for unauthenticated attackers to send multiple requests with large value...

5.3CVSS6.9AI score0.00517EPSS
Exploits0References1
OSV
OSV
added 2024/12/17 12:15 p.m.2 views

CVE-2024-12601

The Calculated Fields Form plugin for WordPress is vulnerable to Denial of Service in all versions up to, and including, 5.2.63. This is due to unlimited height and width parameters for CAPTCHA images. This makes it possible for unauthenticated attackers to send multiple requests with large value...

5.3CVSS5.8AI score0.00517EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2024/12/17 11:10 a.m.8 views

CVE-2024-12601 Calculated Fields Form <= 5.2.63 - Denial of Service

The Calculated Fields Form plugin for WordPress is vulnerable to Denial of Service in all versions up to, and including, 5.2.63. This is due to unlimited height and width parameters for CAPTCHA images. This makes it possible for unauthenticated attackers to send multiple requests with large value...

5.3CVSS6.9AI score0.00517EPSS
Exploits0References4
CVE
CVE
added 2024/12/17 11:10 a.m.43 views

CVE-2024-12601

CVE-2024-12601 is a confirmed Denial of Service vulnerability in the WordPress plugin Calculated Fields Form . The issue stems from unlimited height/width CAPTCHA parameters, enabling unauthenticated attackers to send oversized CAPTCHA requests and exhaust server resources. Affected software: Cal...

5.3CVSS5.3AI score0.00517EPSS
Exploits0References4Affected Software1
Rows per page
Query Builder