| Max CVSS | 10.0 | Min CVSS | 5.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2011-3122 | 10.0 |
Unspecified vulnerability in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact and attack vectors related to "Media security."
|
29-08-2017 - 01:30 | 10-08-2011 - 20:55 | |
| CVE-2011-3130 | 7.5 |
wp-includes/taxonomy.php in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact and attack vectors related to "Taxonomy query hardening," possibly involving SQL injection.
|
29-08-2017 - 01:30 | 10-08-2011 - 21:55 | |
| CVE-2011-3128 | 5.0 |
WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 treats unattached attachments as published, which might allow remote attackers to obtain sensitive data via vectors related to wp-includes/post.php.
|
29-08-2017 - 01:30 | 10-08-2011 - 21:55 | |
| CVE-2011-3126 | 5.0 |
WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 allows remote attackers to determine usernames of non-authors via canonical redirects.
|
29-08-2017 - 01:30 | 10-08-2011 - 21:55 | |
| CVE-2011-3127 | 5.8 |
WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 does not prevent rendering for (1) admin or (2) login pages inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web s
|
29-08-2017 - 01:30 | 10-08-2011 - 21:55 | |
| CVE-2011-3129 | 9.3 |
The file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2, when running "on hosts with dangerous security settings," has unknown impact and attack vectors, possibly related to dangerous filenames.
|
31-05-2016 - 14:37 | 10-08-2011 - 21:55 |