SQL Injection Vulnerability in WP Symposium Plugin for WordPress
CVE-2015-6522

Currently unrated

Key Information:

Vendor

Wordpress
Status
WP Symposium
Vendor
CVE Published:
19 August 2015

What is CVE-2015-6522?

The WP Symposium plugin for WordPress, prior to version 15.8, contains a SQL injection vulnerability that enables remote attackers to execute arbitrary SQL commands through the 'size' parameter in the get_album_item.php file. This flaw could lead to unauthorized data access or manipulation, potentially compromising the entire WordPress installation. Users are encouraged to update to the latest version of the plugin to mitigate this risk.

References

https://www.exploit-db.com/exploits/37824/
exploitx_refsource_EXPLOIT-DB
https://wpvulndb.com/vulnerabilities/8140
x_refsource_MISC

EPSS Score

78% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.