CVE-2011-3127

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 does not prevent rendering for (1) admin or (2) login pages inside a frame in a third-party HTML document…

published August 10, 2011

CVSS
—
EPSS
2%
Percentile
74.3
In the wild
Unconfirmed
What it is

WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 does not prevent rendering for (1) admin or (2) login pages inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01525 · 74.3th percentile
Published
2011-08-10T21:16Z
EPSS history
Timeline
  • 10 AUG 21:16Z
    WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 does not prevent rendering for (1) admin or (2) login pages inside a frame in a third-party HTML document…
    cvelistv5