CVE-2014-10021

Unrestricted file upload vulnerability in UploadHandler.php in the WP Symposium plugin 14.11 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in server/php/.

• http://www.exploit-db.com/exploits/35543Exploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/71686Broken Link
• http://www.exploit-db.com/exploits/35543Exploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/71686Broken Link

Published

Jan 13, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-10015SQL injection vulnerability in load-calendar.php in PHPJabbe…
• CVE-2014-10016Multiple cross-site scripting (XSS) vulnerabilities in the W…
• CVE-2014-10017Multiple SQL injection vulnerabilities in the Welcart e-Comm…
• CVE-2014-10018Cross-site scripting (XSS) vulnerability in webconfig/wlan/c…
• CVE-2014-10019Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2014-10020SQL injection vulnerability in login.php in Simple e-documen…
• CVE-2014-10022Apache Traffic Server before 5.1.2 allows remote attackers t…
• CVE-2014-10023Multiple SQL injection vulnerabilities in TopicsViewer 3.0 B…
• CVE-2014-10024Multiple integer signedness errors in DirectShowDemuxFilter,…
• CVE-2014-10025Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2014-10026index.cgi in D-Link DAP-1360 with firmware 2.5.4 and earlier…
• CVE-2014-10027Multiple cross-site request forgery (CSRF) vulnerabilities i…