Description

The file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2, when running "on hosts with dangerous security settings," has unknown impact and attack vectors, possibly related to dangerous filenames.

Remediation

References

CVE-2011-3129

Related Vulnerabilities

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Cross-Site Scripting (1.2.995)

WordPress Plugin JoomSport-for Sports: Team & League, Football, Hockey & more Multiple SQL Injection Vulnerabilities (5.2.5)

MySQL CVE-2019-2686 Vulnerability (CVE-2019-2686)

ownCloud Exposure of Resource to Wrong Sphere Vulnerability (CVE-2020-36252)

WordPress Plugin Image News slider Arbitrary File Upload (3.5)

Severity

Critical

Classification

CVE-2011-3129 CWE-264

Tags

Missing Update Known Vulnerabilities