CVE-2017-1002000: Vulnerability in wordpress plugin mobile-friendly-app-builder-by-easytouch v3.0, The code in file ./mobile-...

Security readout for executives and security teams

This CVE affects the WordPress plugin mobile-friendly-app-builder-by-easytouch. The reported issue is that its image upload handler did not require login or permission checks, allowing unauthorized content uploads. That can create serious website integrity and malware-hosting risk if the plugin is installed and reachable. Exposure is likely limited to WordPress sites with the mobile-friendly-app-builder-by-easytouch plugin installed, especially version 3.0, with the plugin upload handler publicly reachable. Treat as urgent for any internet-facing WordPress site using this plugin. The issue enables unauthorized uploads and has public exploit references, but confirmed active exploitation is not supported by the provided sources. Mitigation focus: Inventory WordPress sites for this plugin and affected version.; Check WordPress plugin and vendor guidance for a fixed or supported release.; Disable or remove the plugin if no maintained fixed version is available..

Prepared

Jun 12, 2026, 20:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.