CVE-2024-12601

Summary

CVE-2024-12601: The Calculated Fields Form plugin in WordPress, up to version 5.2.63, is susceptible to a Denial of Service (DoS) attack. This vulnerability arises due to unlimited height and width parameters for CAPTCHA images, enabling unauthenticated attackers to flood the server with multiple requests featuring excessive values. If not adequately mitigated, these attacks can lead to significant resource consumption and potential server overload.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.