Vulnerability record · CVE-2015-6522 · published 19 August 2015
CVE-2015-6522: WP Symposium plugin SQL injection via size parameter
Wpsymposium · Wp Symposium
The WP Symposium plugin for WordPress before version 15.8 passes the size parameter to get_album_item.php without proper sanitisation, allowing SQL injection. An unauthenticated remote attacker can inject arbitrary SQL, which can lead to full database compromise of the WordPress site.
Description
SQL injection vulnerability in the WP Symposium plugin before 15.8 for WordPress allows remote attackers to execute arbitrary SQL commands via the size parameter to get_album_item.php.
AV:N/AC:L/Au:N/C:P/I:P/A:P
Automated analysis
high priorityUnauthenticated remote SQL injection with public exploit code and very high EPSS probability, though not observed in KEV or ransomware campaigns.
What it is
The WP Symposium plugin for WordPress before version 15.8 passes the size parameter to get_album_item.php without proper sanitisation, allowing SQL injection. An unauthenticated remote attacker can inject arbitrary SQL, which can lead to full database compromise of the WordPress site.
Impact
An attacker gains the ability to read, modify or delete arbitrary data in the underlying WordPress database, including user credentials and site content. Depending on database privileges, this can extend to further server-side compromise.
Attack surface
Reachable over the network through the get_album_item.php script with a crafted size parameter; the CVSS vector AV:N/AC:L/Au:N indicates no authentication and no user interaction are required.
Exploitation
Not listed in CISA KEV, but public exploit code exists (Exploit-DB 37824 and WPVulnDB references tagged Exploit) and EPSS is 0.741 with a 0.994 percentile, indicating high likelihood of exploitation.
What to do
- Update WP Symposium to version 15.8 or later immediately.
- If patching is not possible, disable or remove the plugin until it can be updated.
- Apply a web application firewall rule blocking SQL metacharacters in the size parameter to get_album_item.php.
- Audit the WordPress database and user accounts for signs of tampering after exposure.
- Restrict database account privileges used by WordPress to the minimum required.
Detection
- Monitor web server logs for requests to get_album_item.php with suspicious size parameter values containing SQL syntax.
- Alert on SQL error messages or unusual query patterns returned by the WordPress database.
- Review database audit logs for unexpected SELECT, UNION or stacked queries originating from the web tier.
- Check for newly created or modified administrative users and unexpected content changes.
This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.
Affected products
1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
| Link | Tags |
|---|---|
| https://wpvulndb.com/vulnerabilities/8140 | ExploitThird Party Advisory |
| https://www.exploit-db.com/exploits/37824/ | Exploit |
| https://wpvulndb.com/vulnerabilities/8140 | ExploitThird Party Advisory |
| https://www.exploit-db.com/exploits/37824/ | Exploit |
Track CVE-2015-6522 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
Source: NIST National Vulnerability Database (record CVE-2015-6522), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.
