CVE-2011-3129: WordPress

High severity, CVSS 9.3. EPSS: 2% chance of exploitation in the next 30 days.

The file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2, when running "on hosts with dangerous security settings," has unknown impact and attack vectors, possibly related to dangerous filenames.

Affected products

• WordPress WordPress: version 3.1 only; version 3.1.1 only; version 3.1.2 only; version 3.2 only

Published 2011-08-10. Last modified 2026-06-16.