CVE-2011-3129: Critical severity wordpress vulnerability
Published Aug 10, 2011
·Updated
The file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2, when running "on hosts with dangerous security settings," has unknown impact and attack vectors, possibly related to dangerous filenames.
Affected Software
4 affected components
WordPress=3.1
WordPress=3.2-beta1
WordPress=3.1.2
WordPress=3.1.1
Remediation
Patch Available
Event History
Aug 10, 2011
CVE Published
via MITRE·09:16 PM
Data Sourced
via MITRE·09:16 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-3129?
The severity of CVE-2011-3129 is considered moderate due to potential impacts from dangerous file uploads.
2
How do I fix CVE-2011-3129?
To fix CVE-2011-3129, upgrade to WordPress version 3.1.3 or later.
3
Which versions of WordPress are affected by CVE-2011-3129?
CVE-2011-3129 affects WordPress versions 3.1 prior to 3.1.3 and 3.2 before Beta 2.
4
Can CVE-2011-3129 be exploited remotely?
Yes, CVE-2011-3129 can potentially be exploited remotely on hosts with misconfigured security settings.
5
What specific functionality does CVE-2011-3129 affect in WordPress?
CVE-2011-3129 affects the file upload functionality in WordPress.