CVE-2014-10021

The WP Symposium plugin 14.11 for WordPress contains an unrestricted file upload vulnerability in UploadHandler.php. A remote, unauthenticated attacker can exploit this by using a specially crafted request to upload a file with an executable extension (e.g., .php ). Because the /wp-symposium/serv...

CVE-2014-10021

creationtimestamp| type| source ---|---|--- 2015-01-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35778 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/wpsymposiumshellupload.rb 2025-10-23 21:12:57+00:00|...

WordPress Symposium Plugin Unauthenticated Shell Upload (CVE-2014-10021)

WordPress Symposium plugin allows user to upload files without proper validation of file type. Successful exploitation of this issue may allow execution of arbitrary code on a vulnerable system...