WordPress < 3.1.3 Multiple Vulnerabilities

According to its self-reported version number, the WordPress application running on the remote web server is prior to 3.1.3. It is, therefore, affected by multiple unspecified vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's...

CVE-2011-3128

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 treats unattached attachments as published, which might allow remote attackers to obtain sensitive data via vectors related to wp-includes/post.php...

CVE-2011-3128

CVE-2011-3128 affects WordPress: versions 3.1 before 3.1.3 and 3.2 before Beta 2 may treat unattached attachments as published, enabling potential data exposure via wp-includes/post.php. The issue has been acknowledged in Debian/DSA-2670-1 and OSV entries; remediation is to upgrade WordPress to a...