title: Cache Images < 3.2.1 - Image Upload / Import via CSRF
description: The Cache Images WordPress plugin before 3.2.1 does not implement nonce checks, which could allow attackers to make any logged user upload images via a CSRF attack.
problem types: CWE-352 Cross-Site Request Forgery (CSRF)
affected:
{
product: Cache Images
vendor: Unknown
versions:
lessThan: 3.2.1, status: affected, version: 3.2.1, versionType: custom
}