Vulnerability Details CVE-2014-10021
Unrestricted file upload vulnerability in UploadHandler.php in the WP Symposium plugin 14.11 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in server/php/.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.194
EPSS Ranking 95.0%
CVSS Severity
CVSS v2 Score 7.5
References
Products affected by CVE-2014-10021
-
cpe:2.3:a:wpsymposiumpro:wp_symposium:14.11