CVE-2015-3325: Wpsymposium Wp Symposium

High severity, CVSS 7.5. EPSS: 4.7% chance of exploitation in the next 30 days.

SQL injection vulnerability in forum.php in the WP Symposium plugin before 15.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the show parameter in the QUERY_STRING to the default URI.

Affected products

• Wpsymposium Wp Symposium: up to and including 15.2

Published 2015-05-15. Last modified 2026-06-17.