7.5
High
CVE-2025-12139 The File Manager for Google Drive – Integrate Google Drive with WordPress plugin for WordPress is vulnerable to…
Description
The File Manager for Google Drive – Integrate Google Drive with WordPress plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.5.3 via the "get_localize_data" function. This makes it possible for unauthenticated attackers to extract sensitive data including Google OAuth credentials (client_id and client_secret) and Google account email addresses.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| File Manager for Google Drive – Integrate Google Drive 1.5 | earliest → 1.5.3 | No fix stated |
Other CVEs of File Manager for Google Drive – Integrate Google Drive
The 4 CVEs of File Manager for Google Drive – Integrate Google Drive →
CVE-2024-13362
Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in…
6.1
Medium
CVE-2022-4974
The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request…
6.3
Medium
CVE-2024-2086
The Integrate Google Drive – Browse, Upload, Download, Embed, Play, Share, Gallery, and Manage Your Google Drive Files…
10.0
Critical