integrate_google_drive 漏洞

中危CVE-2025-121392026/01/05

Integrate Google Drive <= 1.5.3 - Information Disclosure

File Manager for Google Drive - Integrate Google Drive with WordPress plugin for WordPress <= 1.5.3 contains sensitive information exposure caused by improper protection of the get_localize_data function, letting unauthenticated attackers extract Google OAuth credentials and account email addresses, exploit requires no authentication.

integrate_google_drivePoC 已收录

CVSS—

高危CVE-2023-321172023/05/03

Integrate Google Drive <= 1.1.99 - Missing Authorization via REST API Endpoints

The Integrate Google Drive plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several REST API endpoints in versions up to, and including, 1.1.99. This makes it possible for unauthenticated attackers to perform a wide variety of operations, such as moving files, creating folders, copying details, and much more.

integrate_google_drivePoC 已收录

CVSS7.3EPSS 91.5%

integrate_google_drive

关联漏洞

Integrate Google Drive <= 1.5.3 - Information Disclosure

Integrate Google Drive <= 1.1.99 - Missing Authorization via REST API Endpoints