CVE-2024-12601mediumCWE-400

CVE-2024-12601: falha de média gravidade em codepeople Calculated Fields Form

Calculated Fields Form <= 5.2.63 - Denial of Service

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Calculated Fields Form

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 0.6%
The Calculated Fields Form plugin for WordPress is vulnerable to Denial of Service in all versions up to, and including, 5.2.63. This is due to unlimited height and width parameters for CAPTCHA images. This makes it possible for unauthenticated attackers to send multiple requests with large values, resulting in slowing server resources if the server does not mitigate Denial of Service attacks.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Produtos afetados
codepeople · Calculated Fields Form
CVEs relacionadas — codepeople Calculated Fields Form

No mesmo produto, das mais perigosas para as menos.

CVE-2024-2020HIGHCalculated Fields Form Professional <= 5.1.56 - Unauthenticated Stored Cross-Site ScriptingEPSS 0.6%CVE-2024-0963MEDIUMCalculated Fields Form <= 1.2.52 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.5%CVE-2024-9940MEDIUMCalculated Fields Form <= 5.2.45 - HTML InjectionEPSS 0.4%CVE-2023-6446MEDIUMCalculated Fields Form <= 1.2.40 - Authenticated (Admin+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2026-25368MEDIUMWordPress Calculated Fields Form plugin <= 5.4.4.1 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-3986MEDIUMCalculated Fields Form <= 5.4.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Form SettingsEPSS 0.3%