CVE-2011-3126

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 allows remote attackers to determine usernames of non-authors via canonical redirects.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

2.21% chance of exploitation in the next 30 days, 81th percentile

Nuclei

medium

Published

2011-08-10

Updated

2024-08-06

Nuclei templates (1)

• topscoder/nuclei-wordfence-cve/blob/main/nuclei-templates/2011/CVE-2011-3126-wordpress-73…

References

• CVE Record
• NVD entry

Related

• CVE-2011-3125
• CVE-2011-3127
• CVE-2011-3122
• CVE-2011-3128
• CVE-2011-3026
• CVE-2011-3129