Vulnerabilities

TI-2023-28605 CVE-2023-52177 · GHSA-wv34-m534-j822

WordPress Integrate Google Drive plugin <= 1.3.3 - Broken Access Control vulnerability

LOW 28

Missing Authorization vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through 1.3.3.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00296 Published 2024-06-12 No fix listed CWE-862

TI-2024-23539 CVE-2024-35670 · GHSA-j8c5-63vq-fhwp

WordPress Integrate Google Drive plugin <= 1.3.93 - Broken Access Control vulnerability

MEDIUM 48

Broken Authentication vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through 1.3.93.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0041 Published 2024-06-04 No fix listed CWE-287

TI-2023-27179 CVE-2023-49769 · GHSA-f8gq-c723-xwpv

WordPress Integrate Google Drive Plugin <= 1.3.4 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through 1.3.4.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00259 Published 2023-12-17 No fix listed CWE-352

TI-2023-25717 CVE-2023-47548 · GHSA-gh8c-xxj8-7q69

WordPress Integrate Google Drive Plugin <= 1.3.2 is vulnerable to Open Redirection

LOW 27

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in SoftLab Integrate Google Drive – Browse, Upload, Download, Embed, Play, Share, Gallery, and Manage Your Google Drive Files Into Your WordPress Site.Thi…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0039 Published 2023-12-07 No fix listed CWE-601

Vulnerabilities

Filters

WordPress Integrate Google Drive plugin <= 1.3.3 - Broken Access Control vulnerability

WordPress Integrate Google Drive plugin <= 1.3.93 - Broken Access Control vulnerability

WordPress Integrate Google Drive Plugin <= 1.3.4 is vulnerable to Cross Site Request Forgery (CSRF)

WordPress Integrate Google Drive Plugin <= 1.3.2 is vulnerable to Open Redirection