Unrestricted File Upload Vulnerabilities in WP Symposium Plugin by WordPress

CVE-2011-5051

Summary

The WP Symposium plugin for WordPress prior to version 11.12.24 is susceptible to multiple unrestricted file upload vulnerabilities. These flaws allow remote attackers to upload malicious files with executable extensions through specific endpoints, namely uploadify/upload_admin_avatar.php and uploadify/upload_profile_avatar.php. Attackers can then access the uploaded files directly via requests to these files, leading to potential arbitrary code execution within an unspecified directory of the webroot. This presents significant security risks for WordPress users relying on the WP Symposium plugin.

References