WP Symposium

WP Symposium has 12 disclosed vulnerabilities in the WordSec catalog, reported between 2011 and 2015; all 12 are fixed as of September 2026. Their average CVSS score is 7.7, and the most serious one scores 9.9 out of 10. Severity breakdown: 4 critical and 3 high. 2014 was the busiest year with 7 disclosures.

The most common weakness is SQL Injection, behind 5 of the records (42%). Other recurring categories include Cross-Site Scripting, Unrestricted Upload Of File With Dangerous Type.

Every one of the 12 issues recorded for WP Symposium has a vendor fix available, so running the current release closes all known holes.

7 independent researchers contributed these findings, most of them (2) reported by Charlie Eriksen.

Strategic Overview

Avg CVSSHigh

7.7/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all WP Symposium vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.9CVE-2014-8810

WP Symposium < 14.11 - Authenticated SQL Injection

Read the full analysis

Vulnerability Records

12 records


2015-09-06 00:00	WP Symposium <= 15.8.1 - Reflected Cross-Site Scripting WP Symposium <= 15.8.1	`CVE-2015-9414`	6.1 Medium	Ehsan Hosseini	Yes
2015-08-10 00:00	WP Symposium < 15.8 - Blind SQL Injection WP Symposium < 15.8	`N/A`	7.2 High	Glyn Wintle	Yes
2015-08-09 00:00	WP Symposium <= 15.8 - Unauthenticated SQL Injection WP Symposium < 15.8	`CVE-2015-6522`	9.8 Critical	Anonymous	Yes
2015-04-14 00:00	WP Symposium < 15.4 - SQL Injection WP Symposium < 15.4	`CVE-2015-3325`	5.3 Medium	Hannes Trunde	Yes
2014-12-11 00:00	WP Symposium <= 14.11 - Arbitrary File Upload WP Symposium <= 14.11	`CVE-2014-10021`	9.8 Critical	Claudio Viviani	Yes
2014-11-26 00:00	WP Symposium < 14.11 - Authenticated SQL Injection WP Symposium < 14.11	`CVE-2014-8810`	9.9 Critical	Kacper Szurek	Yes
2014-11-26 00:00	WP Symposium <= 14.10 - Cross-Site Scripting WP Symposium <= 14.10	`CVE-2014-8809`	6.1 Medium	Kacper Szurek	Yes
2014-08-01 00:00	WP Symposium < 13.04 - Cross-Site Scripting WP Symposium < 13.04	`CVE-2013-2695`	7.1 High	Anonymous	Yes
2014-08-01 00:00	WP Symposium <= 11.11.26 - Cross-Site Scripting WP Symposium <= 11.11.26	`CVE-2011-3841`	6.1 Medium	Simon Goodchild	Yes
2014-08-01 00:00	WP Symposium <= 12.11 - SQL Injections WP Symposium <= 12.11	`N/A`	9.8 Critical	Charlie Eriksen	Yes

Showing 1–10 of 12 reports