{"api_version":"1","generated_at":"2026-07-23T01:53:29+00:00","cve":"CVE-2011-3129","urls":{"html":"https://cve.report/CVE-2011-3129","api":"https://cve.report/api/cve/CVE-2011-3129.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2011-3129","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2011-3129"},"summary":{"title":"CVE-2011-3129","description":"The file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2, when running \"on hosts with dangerous security settings,\" has unknown impact and attack vectors, possibly related to dangerous filenames.","state":"PUBLISHED","assigner":"mitre","published_at":"2011-08-10 21:55:02","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-264","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"9.3","severity":"","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://www.debian.org/security/2012/dsa-2470","name":"http://www.debian.org/security/2012/dsa-2470","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Debian -- Security Information -- DSA-2470-1 wordpress","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://wordpress.org/news/2011/05/wordpress-3-1-3/","name":"http://wordpress.org/news/2011/05/wordpress-3-1-3/","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"WordPress ›   WordPress 3.1.3 (and WordPress 3.2 Beta 2)","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/47995","name":"http://www.securityfocus.com/bid/47995","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"WordPress Multiple Unspecified Remote Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://secunia.com/advisories/49138","name":"http://secunia.com/advisories/49138","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"About Secunia Research | Flexera","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-3129","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-3129","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2011","cve_id":"3129","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"wordpress","cpe5":"wordpress","cpe6":"3.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3129","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"wordpress","cpe5":"wordpress","cpe6":"3.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3129","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"wordpress","cpe5":"wordpress","cpe6":"3.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"3129","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"wordpress","cpe5":"wordpress","cpe6":"3.2","cpe7":"beta1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T23:22:27.535Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"47995","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/47995"},{"name":"49138","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/49138"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://wordpress.org/news/2011/05/wordpress-3-1-3/"},{"name":"DSA-2470","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"],"url":"http://www.debian.org/security/2012/dsa-2470"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2011-05-25T00:00:00.000Z","descriptions":[{"lang":"en","value":"The file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2, when running \"on hosts with dangerous security settings,\" has unknown impact and attack vectors, possibly related to dangerous filenames."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2016-04-04T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"47995","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/47995"},{"name":"49138","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/49138"},{"tags":["x_refsource_CONFIRM"],"url":"http://wordpress.org/news/2011/05/wordpress-3-1-3/"},{"name":"DSA-2470","tags":["vendor-advisory","x_refsource_DEBIAN"],"url":"http://www.debian.org/security/2012/dsa-2470"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2011-3129","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2, when running \"on hosts with dangerous security settings,\" has unknown impact and attack vectors, possibly related to dangerous filenames."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"47995","refsource":"BID","url":"http://www.securityfocus.com/bid/47995"},{"name":"49138","refsource":"SECUNIA","url":"http://secunia.com/advisories/49138"},{"name":"http://wordpress.org/news/2011/05/wordpress-3-1-3/","refsource":"CONFIRM","url":"http://wordpress.org/news/2011/05/wordpress-3-1-3/"},{"name":"DSA-2470","refsource":"DEBIAN","url":"http://www.debian.org/security/2012/dsa-2470"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2011-3129","datePublished":"2011-08-10T21:16:00.000Z","dateReserved":"2011-08-10T00:00:00.000Z","dateUpdated":"2024-08-06T23:22:27.535Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2011-08-10 21:55:02","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-264","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:3.1:*:*:*:*:*:*:*","matchCriteriaId":"88D1E83C-39AC-4E3D-874A-AF0F16ADDE41"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:3.1.1:*:*:*:*:*:*:*","matchCriteriaId":"65FD149E-8CF4-46FE-9F5E-9DEE61B4164C"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:3.1.2:*:*:*:*:*:*:*","matchCriteriaId":"D23F1397-7262-4B61-8061-83C2ED731DB8"},{"vulnerable":true,"criteria":"cpe:2.3:a:wordpress:wordpress:3.2:beta1:*:*:*:*:*:*","matchCriteriaId":"D8169A02-1AB3-4104-BA42-A934CA94B343"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2011","CveId":"3129","Ordinal":"1","Title":"CVE-2011-3129","CVE":"CVE-2011-3129","Year":"2011"},"notes":[{"CveYear":"2011","CveId":"3129","Ordinal":"1","NoteData":"The file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2, when running \"on hosts with dangerous security settings,\" has unknown impact and attack vectors, possibly related to dangerous filenames.","Type":"Description","Title":"CVE-2011-3129"},{"CveYear":"2011","CveId":"3129","Ordinal":"2","NoteData":"2011-08-10","Type":"Other","Title":"Published"},{"CveYear":"2011","CveId":"3129","Ordinal":"3","NoteData":"2016-04-04","Type":"Other","Title":"Modified"}]}}}