Vulnerability Details CVE-2011-3129
The file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2, when running "on hosts with dangerous security settings," has unknown impact and attack vectors, possibly related to dangerous filenames.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 70.9%
CVSS Severity
CVSS v2 Score 9.3
References
- http://secunia.com/advisories/49138
- http://wordpress.org/news/2011/05/wordpress-3-1-3/
- http://www.debian.org/security/2012/dsa-2470
- http://www.securityfocus.com/bid/47995
- http://secunia.com/advisories/49138
- http://wordpress.org/news/2011/05/wordpress-3-1-3/
- http://www.debian.org/security/2012/dsa-2470
- http://www.securityfocus.com/bid/47995
Products affected by CVE-2011-3129
-
cpe:2.3:a:wordpress:wordpress:3.1
-
cpe:2.3:a:wordpress:wordpress:3.1.1
-
cpe:2.3:a:wordpress:wordpress:3.1.2
-
cpe:2.3:a:wordpress:wordpress:3.2