CVE-2024-13896: Jgehrcke Wp-Geshi-Highlight

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

The WP-GeSHi-Highlight — rock-solid syntax highlighting for 259 languages WordPress plugin through 1.4.3 processes user-supplied input as a regular expression via the wp_geshi_filter_replace_code() function, which could lead to Regular Expression Denial of Service (ReDoS) issue

Affected products

• Jgehrcke Wp-Geshi-Highlight: up to and including 1.4.3

Published 2025-04-10. Last modified 2026-06-17.