Description

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 allows remote attackers to determine usernames of non-authors via canonical redirects.

Remediation

References

CVE-2011-3126

Related Vulnerabilities

WordPress Plugin BCS BatchLine Book Importer Security Bypass (1.5.7)

WordPress Plugin Paytm-Donation SQL Injection (1.3.2)

WordPress 4.3.x Multiple Vulnerabilities (4.3 - 4.3.19)

MySQL CVE-2020-14789 Vulnerability (CVE-2020-14789)

WordPress Plugin Post Pay Counter PHP Object Injection (2.730)

Severity

Medium

Classification

CVE-2011-3126 CWE-200

Tags

Missing Update Known Vulnerabilities