Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-7hh4-ex15-9uh9
Vulnerability ID VCID-7hh4-ex15-9uh9
Aliases CVE-2011-3127
Summary WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 does not prevent rendering for (1) admin or (2) login pages inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.00263 https://api.first.org/data/v1/epss?cve=CVE-2011-3127
epss 0.00263 https://api.first.org/data/v1/epss?cve=CVE-2011-3127
epss 0.00263 https://api.first.org/data/v1/epss?cve=CVE-2011-3127
epss 0.00263 https://api.first.org/data/v1/epss?cve=CVE-2011-3127
epss 0.00263 https://api.first.org/data/v1/epss?cve=CVE-2011-3127
epss 0.00263 https://api.first.org/data/v1/epss?cve=CVE-2011-3127
epss 0.00263 https://api.first.org/data/v1/epss?cve=CVE-2011-3127
epss 0.00263 https://api.first.org/data/v1/epss?cve=CVE-2011-3127
epss 0.00263 https://api.first.org/data/v1/epss?cve=CVE-2011-3127
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2011-3127
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3127
No exploits are available.
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.49677
EPSS Score 0.00263
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T16:30:53.599889+00:00 Debian Oval Importer Import https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.0.0