CVE-2017-1002016

Critical

Published: 14/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Vulnerability in the WordPress plugin 'flickr-picture-backup' version 0.7 is due to the lack of checks to see if the user is authenticated or has permission to upload files in 'flickr-picture-download.php'.

Risk Assessment

The lack of proper access controls may allow unauthorized users to upload files, posing a risk of malware or data leakage.

Recommendation

It is recommended to update the plugin to the latest version that implements proper access controls and user verification.

Original NVD description (English source)

Vulnerability in wordpress plugin flickr-picture-backup v0.7, The code in flickr-picture-download.php doesn't check to see if the user is authenticated or that they have permission to upload files.