CVE-2011-4957

Published: Jun 27, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The make_clickable function in wp-includes/formatting.php in WordPress before 3.1.1 does not properly check URLs before passing them to the PCRE library, which allows remote attackers to cause a denial of service (crash) via a comment with a crafted URL that triggers many recursive calls.

Affected (75)

Products: Wordpress: Wordpress

Wordpress

1 product

Wordpress

Configuration A

75 vulnerable

Vulnerable Software	Affected Versions
Wordpress Wordpress	Up to 3.1
Wordpress Wordpress	Version 0.71
Wordpress Wordpress	Version 1.0.1
Wordpress Wordpress	Version 1.0.2
Wordpress Wordpress	Version 1.0
Wordpress Wordpress	Version 1.1.1
Wordpress Wordpress	Version 1.2.1
Wordpress Wordpress	Version 1.2.2
Wordpress Wordpress	Version 1.2.3
Wordpress Wordpress	Version 1.2.4
Wordpress Wordpress	Version 1.2.5
Wordpress Wordpress	Version 1.2.5 a
Wordpress Wordpress	Version 1.2
Wordpress Wordpress	Version 1.3.2
Wordpress Wordpress	Version 1.3.3
Wordpress Wordpress	Version 1.3
Wordpress Wordpress	Version 1.5.1.1
Wordpress Wordpress	Version 1.5.1.2
Wordpress Wordpress	Version 1.5.1.3
Wordpress Wordpress	Version 1.5.1
Wordpress Wordpress	Version 1.5.2
Wordpress Wordpress	Version 1.5
Wordpress Wordpress	Version 2.0.10
Wordpress Wordpress	Version 2.0.11
Wordpress Wordpress	Version 2.0.1
Wordpress Wordpress	Version 2.0.2
Wordpress Wordpress	Version 2.0.4
Wordpress Wordpress	Version 2.0.5
Wordpress Wordpress	Version 2.0.6
Wordpress Wordpress	Version 2.0.7
Wordpress Wordpress	Version 2.0.8
Wordpress Wordpress	Version 2.0.9
Wordpress Wordpress	Version 2.0
Wordpress Wordpress	Version 2.1.1
Wordpress Wordpress	Version 2.1.2
Wordpress Wordpress	Version 2.1.3
Wordpress Wordpress	Version 2.1
Wordpress Wordpress	Version 2.2.1
Wordpress Wordpress	Version 2.2.2
Wordpress Wordpress	Version 2.2.3
Wordpress Wordpress	Version 2.2
Wordpress Wordpress	Version 2.3.1
Wordpress Wordpress	Version 2.3.2
Wordpress Wordpress	Version 2.3.3
Wordpress Wordpress	Version 2.3
Wordpress Wordpress	Version 2.5.1
Wordpress Wordpress	Version 2.5
Wordpress Wordpress	Version 2.6.1
Wordpress Wordpress	Version 2.6.2
Wordpress Wordpress	Version 2.6.3
Wordpress Wordpress	Version 2.6.5
Wordpress Wordpress	Version 2.6
Wordpress Wordpress	Version 2.7.1
Wordpress Wordpress	Version 2.7
Wordpress Wordpress	Version 2.8.1
Wordpress Wordpress	Version 2.8.2
Wordpress Wordpress	Version 2.8.3
Wordpress Wordpress	Version 2.8.4
Wordpress Wordpress	Version 2.8.4 a
Wordpress Wordpress	Version 2.8.5.1
Wordpress Wordpress	Version 2.8.5.2
Wordpress Wordpress	Version 2.8.5
Wordpress Wordpress	Version 2.8.6
Wordpress Wordpress	Version 2.8
Wordpress Wordpress	Version 2.9.1.1
Wordpress Wordpress	Version 2.9.1
Wordpress Wordpress	Version 2.9.2
Wordpress Wordpress	Version 2.9
Wordpress Wordpress	Version 3.0.1
Wordpress Wordpress	Version 3.0.2
Wordpress Wordpress	Version 3.0.3
Wordpress Wordpress	Version 3.0.4
Wordpress Wordpress	Version 3.0.5
Wordpress Wordpress	Version 3.0.6
Wordpress Wordpress	Version 3.0