CVE-2026-15958

The CVE-2026-15958 entry affects the WordPress plugin Easy Integration for Dropbox (before 2.2.0). The vulnerability arises from missing authorization checks on several file-management AJAX actions that are exposed to unauthenticated users, enabling an attacker to perform unauthenticated actions ...

CSRF in Facebook/Dropbox - "Mallory added a file using Dropbox"

tl;dr Facebook Groups offers the option to upload files directly from the Dropbox account. This integration is done using the OAuth 2.0 protocol and suffered from a variant of the classic OAuth CSRF defined by Egor Homakov as the the Most Common OAuth2 Vulnerability, see video below: Introduction...