PT-2011-4261

CVE-2011-3130

Published

2011-08-10

Updated

2017-08-29

Description by

CVSS 2.0

7.5

High

MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WordPress versions 3.1 through 3.1.2 WordPress versions 3.2 before Beta 2

Description The issue is related to "Taxonomy query hardening" and may involve SQL injection, although the exact impact and attack vectors are not specified.

Recommendations For WordPress versions 3.1 through 3.1.2, update to version 3.1.3 or later. For WordPress versions 3.2 before Beta 2, update to Beta 2 or later.

Exploitability

Fix

Impacts

Researchers

Jesse Ou

Richard Lundeen

Vendors

Affected products

Weakness enumeration

CWE-89: Improper Neutralization of Special Elements used in an SQL Command (\'SQL Injection\')

Related identifiers

CVE-2011-3130