Question 1

What is CVE-2011-3129?

Accepted Answer

CVE-2011-3129 is a high-severity software vulnerability (CWE-264) with a CVSS score of 9.3. The file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2, when running "on hosts with dangerous security settings," has unknown impact and attack vectors, possibly related to dangerous filenames.

Question 2

Is CVE-2011-3129 being actively exploited?

Accepted Answer

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 2%.

Question 3

What products does CVE-2011-3129 affect?

Accepted Answer

Tracked products affected include WordPress. Check the version you run to see whether it is affected.

Question 4

How do I fix CVE-2011-3129?

Accepted Answer

Apply the vendor fix promptly. An official patch or advisory is available. Upgrade affected products to a fixed version.

CVE-2011-3129

Summary

Impact & exploitability

Affected products we track (1)

Recommendation

Additional information