Magento versions 2.1.6 and below suffers from cross site request forgery and shell upload vulnerabilities. Continue reading...