WordPress Multiple Unspecified Remote Vulnerabilities

Bugtraq ID:	47995
Class:	Unknown
CVE:	CVE-2011-3122 CVE-2011-3126 CVE-2011-3127 CVE-2011-3128 CVE-2011-3129 CVE-2011-3130
Remote:	Yes
Local:	Yes
Published:	May 26 2011 12:00AM
Updated:	May 16 2012 07:30PM
Credit:	The vendor reported these issues.
Vulnerable:	WordPress WordPress 3.1.2 WordPress WordPress 3.1.1 WordPress WordPress 3.0.5 WordPress WordPress 3.0.4 WordPress WordPress 3.0.3 WordPress WordPress 3.0.2 WordPress WordPress 3.1 WordPress WordPress 3.0.1 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:	WordPress WordPress 3.1.3

WordPress Multiple Unspecified Remote Vulnerabilities

WordPress is prone to multiple unspecified remote vulnerabilities.

The impact of these issues is currently unknown. We will update this BID when more information emerges.

WordPress versions prior to 3.1.3 are vulnerable.

WordPress Multiple Unspecified Remote Vulnerabilities

The following proof of concept is available:

• /data/vulnerabilities/exploits/47995_tar.gz

WordPress Multiple Unspecified Remote Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

WordPress Multiple Unspecified Remote Vulnerabilities

References:

• Vulnerability in WordPress Could Allow Cross-Domain Script Execution (Microsoft)
  
• WordPress 3.1.3 (and WordPress 3.2 Beta 2) (WordPress)
  
• WordPress Homepage (WordPress)