CVE-2011-3126

EPSS 0.97%

Published: 8/10/2011Modified: 5/27/2026

Description

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 allows remote attackers to determine usernames of non-authors via canonical redirects.

Affected packages (1)

Debian/wordpressfrom 0, < 3.2.1+dfsg-1

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2011-3126