7.5
Élevée
CVE-2025-12139 The File Manager for Google Drive – Integrate Google Drive with WordPress plugin for WordPress is vulnerable to…
Description
The File Manager for Google Drive – Integrate Google Drive with WordPress plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.5.3 via the "get_localize_data" function. This makes it possible for unauthenticated attackers to extract sensitive data including Google OAuth credentials (client_id and client_secret) and Google account email addresses.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| File Manager for Google Drive – Integrate Google Drive 1.5 | premières → 1.5.3 | Pas de correctif indiqué |
Autres CVE de File Manager for Google Drive – Integrate Google Drive
Les 4 CVE de File Manager for Google Drive – Integrate Google Drive →
CVE-2024-13362
Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in…
6.1
Moyenne
CVE-2022-4974
The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request…
6.3
Moyenne
CVE-2024-2086
The Integrate Google Drive – Browse, Upload, Download, Embed, Play, Share, Gallery, and Manage Your Google Drive Files…
10.0
Critique