WordPress plugin
WP Symposium security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 12 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical4
- High3
- Medium5
- Low0
All WP Symposium vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.1 | Reflected Cross-Site Scripting ≤15.8.1Update to 15.9 | CVE-2015-9414 | |
| High7.2 | Blind SQL Injection <15.8Update to 15.8 | — | |
| Critical9.8 | Unauthenticated SQL Injection <15.8Update to 15.8 | CVE-2015-6522 | |
| Medium5.3 | SQL Injection <15.4Update to 15.4 | CVE-2015-3325 | |
| Critical9.8 | Arbitrary File Upload ≤14.11Update to 15.1 | CVE-2014-10021 | |
| Medium6.1 | Cross-Site Scripting ≤14.10Update to 14.11 | CVE-2014-8809 | |
| Critical9.9 | Authenticated SQL Injection <14.11Update to 14.11 | CVE-2014-8810 | |
| Medium6.1 | Open Redirection ≤13.04Update to 13.05 | CVE-2013-2694 | |
| High7.1 | Cross-Site Scripting <13.04Update to 13.04 | CVE-2013-2695 | |
| Medium6.1 | Cross-Site Scripting ≤11.11.26Update to 11.12.08 | CVE-2011-3841 | |
| Critical9.8 | SQL Injections ≤12.11Update to 12.12 | — | |
| High8.8 | Arbitrary File Upload <11.12.24Update to 11.12.24 | CVE-2011-5051 |
- Medium6.1Reflected Cross-Site Scripting
≤15.8.1Update to 15.9
- High7.2Blind SQL Injection
<15.8Update to 15.8
- Critical9.8Unauthenticated SQL Injection
<15.8Update to 15.8
- Medium5.3SQL Injection
<15.4Update to 15.4
- Critical9.8Arbitrary File Upload
≤14.11Update to 15.1
- Medium6.1Cross-Site Scripting
≤14.10Update to 14.11
- Critical9.9Authenticated SQL Injection
<14.11Update to 14.11
- Medium6.1Open Redirection
≤13.04Update to 13.05
- High7.1Cross-Site Scripting
<13.04Update to 13.04
- Medium6.1Cross-Site Scripting
≤11.11.26Update to 11.12.08
- Critical9.8SQL Injections
≤12.11Update to 12.12
- High8.8Arbitrary File Upload
<11.12.24Update to 11.12.24
WP Symposium: common questions
Does WP Symposium have known vulnerabilities?
Yes. VulnCrest Radar lists 12 known vulnerabilities in WP Symposium: 4 critical, 3 high, 5 medium. None are known to affect version null.
How do I check which version of WP Symposium I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WP Symposium vulnerability?
CVE-2015-9414, published Sep 6, 2015: WP Symposium <= 15.8.1 - Reflected Cross-Site Scripting. Severity: Medium (CVSS 6.1).
Is any WP Symposium vulnerability listed in CISA KEV?
No. None of the known WP Symposium vulnerabilities is currently listed in the CISA KEV catalog.