CVE-2011-4957

The make_clickable function in wp-includes/formatting.php in WordPress before 3.1.1 does not properly check URLs before passing them to the PCRE library, which…

published June 27, 2012

CVSS
—
EPSS
3%
Percentile
87.8
In the wild
Unconfirmed
What it is

The make_clickable function in wp-includes/formatting.php in WordPress before 3.1.1 does not properly check URLs before passing them to the PCRE library, which allows remote attackers to cause a denial of service (crash) via a comment with a crafted URL that triggers many recursive calls.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03155 · 87.8th percentile
Published
2012-06-27T21:00Z
EPSS history
Timeline
  • 27 JUN 21:00Z
    The make_clickable function in wp-includes/formatting.php in WordPress before 3.1.1 does not properly check URLs before passing them to the PCRE library, which…
    cvelistv5