WordPress Plugin Vulnerabilities

flickr-picture-backup <= 0.7 - Unauthenticated File Upload

Description

The flickr-picture-backup WordPress plugin was affected by an Unauthenticated File Upload security vulnerability.

Affects Plugins

Plugin icon
flickr-picture-backup
No known fix

References

CVE
CVE-2017-1002016
URL
http://www.vapidlabs.com/advisory.php?v=190

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
795a77b3-f835-4637-9329-abfca4be2c38

Timeline

Publicly Published
2017-04-26 (about 9 years ago)
Added
2017-05-02 (about 9 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2026-01-13
Title
Blogzee <= 1.0.5 - Authenticated (Subscriber+) Arbitrary File Upload
Published
2023-11-28
Title
WP Mail Log < 1.1.3 – Contributor+ Arbitrary File Upload to RCE
Published
2024-10-09
Title
Creates 3D Flipbook, PDF Flipbook <= 1.2 - Authenticated (Subscriber+) Arbitrary File Upload
Published
2025-03-18
Title
File Away <= 3.9.9.0.1 - Missing Authorization to Unauthenticated File Upload via upload Function
Published
2024-03-28
Title
Salon booking system < 9.5.1 - Unauthenticated Arbitrary File Upload