Wpsymposiumpro
7 CVEs across 3 Wpsymposiumpro products. Browse Wpsymposiumpro vulnerabilities, severities, and proof-of-concept exploits.
Wpsymposiumpro products with known CVEs
Wpsymposiumpro CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2021-47927 | Medium | 6.4 | 2026-05-10 | WordPress Plugin WP Symposium Pro 2021.10 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts… |
CVE-2015-9414 | Medium | 6.1 | 2019-09-26 | The wp-symposium plugin through 15.8.1 for WordPress has XSS via the wp-content/plugins/wp-symposium/get_album_item.php?size parameter. |
CVE-2014-10021 | | | 2015-01-13 | Unrestricted file upload vulnerability in UploadHandler.php in the WP Symposium plugin 14.11 for WordPress allows remote attackers to execute arbitrary code by… |
CVE-2014-8810 | | | 2014-12-24 | SQL injection vulnerability in ajax/mail_functions.php in the WP Symposium plugin before 14.11 for WordPress allows remote authenticated users to execute arbit… |
CVE-2014-8809 | | | 2014-12-24 | Multiple cross-site scripting (XSS) vulnerabilities in the WP Symposium plugin before 14.11 for WordPress allow remote attackers to inject arbitrary web script… |
CVE-2013-2695 | | | 2014-03-28 | Cross-site scripting (XSS) vulnerability in invite.php in the WP Symposium plugin before 13.04 for WordPress allows remote attackers to inject arbitrary web sc… |
CVE-2013-2694 | | | 2014-03-28 | Open redirect vulnerability in invite.php in the WP Symposium plugin 13.04 for WordPress allows remote attackers to redirect users to arbitrary web sites and c… |
CVE-2011-3841 | | | 2011-12-27 | Cross-site scripting (XSS) vulnerability in uploadify/get_profile_avatar.php in the WP Symposium plugin before 11.12.08 for WordPress allows remote attackers t… |