Lucene search
HistoryAug 10, 2011 - 9:55 p.m.
CVE-2011-3128
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.2 Medium
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
77.9%
WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 treats unattached attachments as published, which might allow remote attackers to obtain sensitive data via vectors related to wp-includes/post.php.
Affected configurations
Node
wordpresswordpressMatch3.1
ORwordpresswordpressMatch3.1.1
ORwordpresswordpressMatch3.1.2
ORwordpresswordpressMatch3.2beta1
Related
cvelist
cvelist
CVE-2011-3128
2011-08-10 21:16:00
debiancve
debiancve
CVE-2011-3128
2011-08-10 21:55:02
patchstack
patchstack
WordPress <= 3.1.2 - Multiple vulnerabilities
2011-08-10 00:00:00
cve
cve
CVE-2011-3128
2011-08-10 21:55:02
ubuntucve
ubuntucve
CVE-2011-3128
2011-08-10 00:00:00
prion
prion
Code injection
2011-08-10 21:55:00
nessus
nessus
WordPress < 3.1.3 Multiple Vulnerabilities
2016-02-26 00:00:00
WordPress < 3.1.3 Multiple Vulnerabilities
2018-01-26 00:00:00
Debian DSA-2470-1 : wordpress - several vulnerabilities
2012-05-15 00:00:00
openvas
openvas
Debian Security Advisory DSA 2670-1 (wordpress)
2012-05-31 00:00:00
Debian Security Advisory DSA 2670-1 (wordpress)
2012-05-31 00:00:00
Debian: Security Advisory (DSA-2470-1)
2023-03-08 00:00:00
osv
osv
wordpress - several
2012-05-11 00:00:00
debian
debian
[SECURITY] [DSA 2670-1] wordpress security update
2012-05-11 20:41:14
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.2 Medium
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
77.9%
Related for NVD:CVE-2011-3128