Log out
Get PRO

Latest

Input validation vulnerability in WP Symposium 15.8

  • Severity: high-risk
  • Status: Open
  • Publication: August 10, 2015

The WP Symposium plugin for WordPress is vulnerable to a type of security issue called blind SQL Injection. This type of vulnerability affects versions of the plugin that were released before version 15.8. The issue is caused by an incorrect way of handling user supplied parameters, and due to the lack of proper preparation for existing SQL queries. This means that unauthenticated attackers can append extra SQL queries to existing queries, which can be used to access sensitive information stored in the database.

Detected in:

WP Symposium open vulnerable versions: >= * < 15.8

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.