Claudio Viviani has discovered a vulnerability in the WP Symposium plugin for WordPress, which can be exploited by malicious people to compromise a vulnerable system.
The vulnerability is caused due to the application not properly validating uploaded file types, which can be exploited to upload and execute arbitrary PHP code.
The vulnerability is confirmed in version 14.11. Prior versions may also be affected.
