CVE-2026-93031

CVE-2026-93031 affects four WordPress plugins from WP Cloud Plugins — Use-your-Drive , Out-of-the-Box , Share-one-Drive , and Lets-Box — in versions 2.0 through 3.8.3 . The vulnerability is an Authenticated (Subscriber+) Arbitrary File Upload via the download_file_to_uploads function. Three combi...

EUVD-2026-83414

The WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box plugins for WordPress are vulnerable to Arbitrary File Upload in all versions from 2.0 up to, and including, 3.8.3 via the downloadfiletouploads function. This is due to the import action being registered for...