WordPress Symposium Plugin <= 11.12.24 - Multiple Arbitrary File Upload

Because of this vulnerability, the attackers can execute arbitrary code by uploading a file with an executable extension using uploadify/upload_profile_avatar.php or uploadify/upload_admin_avatar.php.

Solution

           Update the plugin.