All vulnerabilities

WordPress core

CVE-2011-3129

The file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2, when running "on hosts with dangerous security settings," has unknown impact and attack vectors, possibly related to dangerous filenames.

Severity
High 9.3
Published
10 Aug 2011
Last changed
16 Jun 2026
Added to UpHeron
17 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
WordPressWordPress core · cpe:a:wordpress:wordpress
  • Version 3.1
  • Version 3.1.1
  • Version 3.1.2
  • Version 3.2-beta1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2011-3129
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2011-3129