Critical severity9.8NVD Advisory· Published Sep 14, 2017· Updated May 13, 2026

CVE-2017-1002000

Description

Vulnerability in wordpress plugin mobile-friendly-app-builder-by-easytouch v3.0, The code in file ./mobile-friendly-app-builder-by-easytouch/server/images.php doesn't require authentication or check that the user is allowed to upload content.

Affected products

Mobile Friendly App Builder By Easytouch Project/Mobile Friendly App Builder By Easytouch
cpe:2.3:a:mobile-friendly-app-builder-by-easytouch_project:mobile-friendly-app-builder-by-easytouch:3.0:*:*:*:*:wordpress:*:*
jenova12345/mobile-friendly-app-builder-by-easytouchv5
Range: unspecified

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.vapidlabs.com/advisory.phpnvdExploitThird Party Advisory
www.exploit-db.com/exploits/41540/nvdExploitThird Party AdvisoryVDB Entry
www.securityfocus.com/bid/96899nvdThird Party AdvisoryVDB Entry
www.securityfocus.com/bid/96905nvdThird Party AdvisoryVDB Entry
wordpress.org/plugins-wp/mobile-friendly-app-builder-by-easytouch/nvdNot Applicable

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.051
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000