CVE-2012-0937

wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier does not limit the number of MySQL queries sent to external MySQL database servers, which allows remote attackers to use WordPress as a proxy for brute-force attacks or denial of service attacks via the dbhost parameter, a different vulnerability than CVE-2011-4898. NOTE: the vendor disputes the significance of this issue because an incomplete WordPress installation might be present on the network for only a short time

We have discovered 128,955 live websites that are affected by CVE-2012-0937.

Run a Free Instant Scan



Affected Software

Product  WordPress
Category Content Management System
Vulnerable Domains128,955 live websites (1.65% of WordPress install base)
Vulnerable Versions
  • from 0 through 3.3.1
Vulnerable Versions Count409 versions ( 27% of all versions)



Details

  • Published - Jan 30, 2012
  • Updated - Sep 16, 2024

Website Distribution by Country

Number of websites using CVE-2012-0937
United States24,905 websites


Italy25,860 websites
Japan8,141 websites
Germany6,873 websites
GB5,600 websites
Netherlands4,903 websites
Kazakhstan4,539 websites
Russia4,042 websites
France3,677 websites
Sweden2,963 websites

Website Distribution by TLD

Number of websites using CVE-2012-0937
.com42,544 websites
.it17,205 websites
.org5,505 websites
.nl4,011 websites
.de3,598 websites
.ru3,492 websites
.net3,483 websites
.co.uk3,043 websites
.se2,471 websites
.cz2,464 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2012-0937

Top websites that are affected by CVE-2012-0937. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
******.org United States***
*******.com China*,***
*****.com United States*,***
**********.es United States*,***
***********.com United States*,***
************.org United States*,***
*******.org United States*,***
*****.org United States*,***
***************.com United States*,***
*********.fr Italy**,***
See full domain list

FAQ

A total of 128,955 websites have been identified as vulnerable to CVE-2012-0937, based on global website indexing conducted by WebTechSurvey.
The WordPress is affected by the CVE-2012-0937 vulnerability.
WordPress versions up to and including 3.3.1 are vulnerable to CVE-2012-0937.