WordPress Filr plugin authorization issue vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress plugin is an application plugin. WordPress Filr plugin versions prior to 1.2.2.1 are vulnerable to an authorization issue, which stems from the plugin’s lack of authorization checks in its two AJAX operations. An attacker could exploit this vulnerability to upload arbitrary HTML files and delete all files or arbitrary files.