WordPress WP Links Page plugin <= 4.9.5 - Missing Authorization to Authenticated (Subscriber+) Limited Image Update vulnerability

Missing Authorization to Authenticated Subscriber+ Limited Image Update vulnerability discovered by Lucio Sá in WordPress Plugin WP Links Page versions = 4.9.5...