Unrestricted File Upload Vulnerability in WP Symposium Plugin for WordPress
CVE-2014-10021

Currently unrated

Key Information:

Vendor

Wordpress
Status
WP Symposium
Vendor
CVE Published:
13 January 2015

What is CVE-2014-10021?

An unrestricted file upload vulnerability exists in the UploadHandler.php file of the WP Symposium plugin version 14.11 for WordPress. This flaw allows remote attackers to upload malicious files with executable extensions, leading to arbitrary code execution. By directly accessing the uploaded file through the server's PHP directory, attackers can potentially compromise the integrity and security of the WordPress site, gaining unauthorized access and control.

References

http://www.exploit-db.com/exploits/35543
exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/bid/71686
vdb-entryx_refsource_BID

EPSS Score

19% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
The Cyber Security Vulnerability Database.