Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: oscaruh Clear all filters
TI-2025-11618 CVE-2025-12666 · GHSA-6387-rwfw-jgm3

Google Drive upload and download link <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The Google Drive upload and download link plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' parameter of the 'atachfilegoogle' shortcode in all versions up to, and including, 1.0 due to ins…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00231 Published 2025-11-27 No fix listed CWE-79