CVE-2017-1002001

Vulnerability in wordpress plugin mobile-app-builder-by-wappress v1.05, The plugin includes unlicensed vulnerable CMS software from http://www.invedion.com...

CVE-2017-1002000

Vulnerability in wordpress plugin mobile-friendly-app-builder-by-easytouch v3.0, The code in file ./mobile-friendly-app-builder-by-easytouch/server/images.php doesn't require authentication or check that the user is allowed to upload content...

CVE-2017-1002001

The CVE-2017-1002001 issue affects the WordPress plugin “mobile-app-builder-by-wappress” v1.05. CNVD/NVD detail an arbitrary file upload vulnerability stemming from the plugin’s server/images.php path, where authentication/permissions checks are not performed, enabling an attacker to upload arbit...

WordPress Mobile app Builder 1.05 - Unauthenticated File Upload

Plugin is still affected and has been closed...