CVE-2015-6522: Wpsymposium Wp Symposium

High severity, CVSS 7.5. EPSS: 74.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in the WP Symposium plugin before 15.8 for WordPress allows remote attackers to execute arbitrary SQL commands via the size parameter to get_album_item.php.

Affected products

• Wpsymposium Wp Symposium: up to and including 15.7

Published 2015-08-19. Last modified 2026-06-17.