WordPress SimpleFlickr plugin version 3.0.3 suffers from cross site request forgery and cross site scripting vulnerabilities.