WordPress Funnelforms Free plugin <= 3.7.3.2 - Missing Authorization to Unauthenticated Arbitrary Media Upload and Deletion vulnerability

Missing Authorization to Unauthenticated Arbitrary Media Upload and Deletion vulnerability discovered by Lucio Sá in WordPress Plugin Funnelforms Free versions = 3.7.3.2...