SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

[Forgot Password]

Paid content will be excluded from the download.

Download | Alert*

CVE

CVE-2011-3126

Date: (C)2011-08-10 (M)2023-12-22

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 allows remote attackers to determine usernames of non-authors via canonical redirects.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 5.0
Exploit Score: 10.0
Impact Score: 2.9

CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: NONE
Availability: NONE

Reference:

http://wordpress.org/news/2011/05/wordpress-3-1-3/

wordpress-nonauthos-info-disclosure(69173)

cpe:/a:wordpress:wordpress:3.1.1
cpe:/a:wordpress:wordpress:3.1.2
cpe:/a:wordpress:wordpress:3.1
cpe:/a:wordpress:wordpress:3.2:beta1
...

oval:org.secpod.oval:def:600801

© SecPod Technologies