Vulnerability in Wordpress
CVE-2011-3129
The file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2, when running "on hosts with dangerous security settings," has unknown impact and attack vectors, possibly related to dangerous filenames.
EPSS: 0.020 (78.9th percentile) — read the EPSS interpretation.
Affected products
- Wordpress — versions 3.1, 3.1.1, 3.1.2
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (x_refsource_CONFIRM, Patch)
- cve@mitre.org (vendor-advisory, x_refsource_DEBIAN)
Frequently asked questions
- What is CVE-2011-3129?
- CVE-2011-3129 is a vulnerability in Wordpress, classified under CWE-264. Published 2011-08-10.
- Is CVE-2011-3129 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.