CVE-2011-3129

Published: Aug 10, 2011Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

The file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2, when running "on hosts with dangerous security settings," has unknown impact and attack vectors, possibly related to dangerous filenames.

Affected (4)

Products: Wordpress: Wordpress

Wordpress

1 product

Wordpress

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Wordpress Wordpress	Version 3.1.1
Wordpress Wordpress	Version 3.1.2
Wordpress Wordpress	Version 3.1
Wordpress Wordpress	Version 3.2 beta1

Related CWEs

CWE-264

References (8)

http://secunia.com/advisories/49138

Source: cve@mitre.org

http://wordpress.org/news/2011/05/wordpress-3-1-3/

Source: cve@mitre.org

Patch

http://www.debian.org/security/2012/dsa-2470

Source: cve@mitre.org

http://www.securityfocus.com/bid/47995

Source: cve@mitre.org

http://secunia.com/advisories/49138

Source: af854a3a-2127-422b-91ae-364da2661108

http://wordpress.org/news/2011/05/wordpress-3-1-3/

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.debian.org/security/2012/dsa-2470

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/47995

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.