CVE-2011-5051

CVE-2011-5051 describes multiple unrestricted file upload vulnerabilities in the WP Symposium plugin for WordPress, versions prior to 11.12.24. This flaw allows unauthenticated remote attackers to execute arbitrary code by uploading files with executable extensions through specific upload scripts, then directly accessing them. With a CVSS score of 7.5 (High), the vulnerability is easily exploitable over the network with low complexity and no authentication, potentially leading to compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this decade-old vulnerability.