CVE-2014-10021
72Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actepss 60%
from disclosure to weapon0 days
Published on NVDJan 13
1st PoCDec 15
metasploitDec 11
VulnCheckDec 30
exploitation probability
60%top 1% of all CVEs
observed exploitation
yesVulnCheck
3 public exploit(s)
Unrestricted file upload vulnerability in UploadHandler.php in the WP Symposium plugin 14.11 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in server/php/.
Affected products
n/a · n/apublic PoCs found — 3
cve_referencewww.exploit-db.com/exploits/35543unverifiedexploitdbwww.exploit-db.com/exploits/35778unverifiedexploitdbwww.exploit-db.com/exploits/35543unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.