CVE-2024-12579 is a Regular Expression Denial of Service vulnerability in the teckel Minify HTML WordPress plugin affecting all versions up to 2.1.10. The issue stems from the plugin processing user-supplied input as a regular expression, which can lead to catastrophic backtracking. This allows unauthenticated attackers to create specially crafted comments that consume excessive resources, causing denial of service by breaking page functionality. The vulnerability is identified as CWE-400 and has a CVSS 3.1 base score of 5.3 (medium severity). No patch or official fix has been documented in the provided data.

Exploitation of this vulnerability can cause denial of service conditions on affected WordPress sites by triggering excessive resource consumption through crafted comments. This results in broken pages and degraded availability. There is no impact on confidentiality or availability beyond the denial of service effect. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, administrators should consider disabling or removing the Minify HTML plugin if possible or implementing input filtering to block suspicious comment content that could trigger the vulnerability. Monitor official teckel or WordPress security advisories for updates.