CVE-2014-10021

Currently unrated

Key Information:

Vendor
Wordpress
Status
WP Symposium
Vendor
CVE Published:
13 January 2015

Summary

Unrestricted file upload vulnerability in UploadHandler.php in the WP Symposium plugin 14.11 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in server/php/.

References

http://www.exploit-db.com/exploits/35543
exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/bid/71686
vdb-entryx_refsource_BID

EPSS Score

89% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.