CVE-2011-3126

The CVE-2011-3126 entry applies to WordPress core: versions 3.1 prior to 3.1.3 and 3.2 prior to Beta 2 allow remote attackers to determine usernames of non-authors via canonical redirects. The concrete impact is information disclosure (usernames) without authentication. Public details consistentl...