flickr-picture-backup <= 0.7 - Arbitrary file upload
criticalVulnerability in wordpress plugin flickr-picture-backup v0.7, The code in flickr-picture-download.php doesn't check to see if the user is authenticated or that they have permission to upload files.
- CVSS:
- 9.8
- Affected:
- up to 0.7
- Fix:
- No patched version reported
- Disclosed:
- Apr 26, 2017