Unrestricted File Upload Vulnerability in WP Symposium Plugin for WordPress
CVE-2014-10021

Currently unrated

Key Information:

Vendor
Wordpress
Status
WP Symposium
Vendor
CVE Published:
13 January 2015

Summary

An unrestricted file upload vulnerability exists in the UploadHandler.php file of the WP Symposium plugin version 14.11 for WordPress. This flaw allows remote attackers to upload malicious files with executable extensions, leading to arbitrary code execution. By directly accessing the uploaded file through the server's PHP directory, attackers can potentially compromise the integrity and security of the WordPress site, gaining unauthorized access and control.

References

http://www.exploit-db.com/exploits/35543
exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/bid/71686
vdb-entryx_refsource_BID

EPSS Score

19% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.