CVE-2017-1002000

Critical

Published: 14/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Vulnerability in the WordPress plugin 'mobile-friendly-app-builder-by-easytouch' version 3.0 allows content upload without authentication.

Risk Assessment

Lack of access control may lead to unauthorized users uploading malicious files, posing a threat to the website's security.

Recommendation

It is recommended to update the plugin to the latest version and implement appropriate authentication and authorization mechanisms for content uploads.

Original NVD description (English source)

Vulnerability in wordpress plugin mobile-friendly-app-builder-by-easytouch v3.0, The code in file ./mobile-friendly-app-builder-by-easytouch/server/images.php doesn't require authentication or check that the user is allowed to upload content.