Lucene search
+L

363 matches found

NVD
NVD
added 2025/02/18 8:15 p.m.34 views

CVE-2025-27016

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in awsm.in Drivr Lite – Google Drive Plugin allows Stored XSS. This issue affects Drivr Lite – Google Drive Plugin: from n/a through 1.0.1...

6.5CVSS0.00231EPSS
SaveExploits0References1
CVE
CVE
added 2025/02/18 7:53 p.m.76 views

CVE-2025-27016

CVE-2025-27016 affects Drivr Lite – Google Drive Plugin (WordPress). The Wordfence, EUVD and CVE records note an Authenticated Stored Cross-Site Scripting vulnerability in Drivr Lite up to version 1.0.1, caused by improper neutralization of input during web page generation. Impact is stored XSS p...

6.5CVSS8.6AI score0.00231EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/02/18 7:53 p.m.45 views

CVE-2025-27016 WordPress Drivr Lite – Google Drive Plugin plugin <= 1.0.1 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in awsm.in Drivr Lite – Google Drive Plugin allows Stored XSS. This issue affects Drivr Lite – Google Drive Plugin: from n/a through 1.0.1...

6.5CVSS0.00231EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/02/18 8:42 a.m.7 views

WordPress Drivr Lite – Google Drive Plugin plugin <= 1.0.1 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by theviper17 Patchstack Alliance in WordPress Plugin Drivr Lite – Google Drive Plugin versions = 1.0.1...

6.5CVSS5.8AI score0.00231EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/15 2:26 p.m.14 views

CVE-2025-26574

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Moch Amir Google Drive WP Media google-drive-wp-media allows Stored XSS.This issue affects Google Drive WP Media: from n/a through = 2.4.4...

6.5CVSS7.2AI score0.00229EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/13 2:16 p.m.21 views

CVE-2025-26574

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Moch Amir Google Drive WP Media google-drive-wp-media allows Stored XSS.This issue affects Google Drive WP Media: from n/a through = 2.4.4...

6.5CVSS0.00229EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/02/13 1:53 p.m.9 views

CVE-2025-26574 WordPress Google Drive WP Media plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Moch Amir Google Drive WP Media google-drive-wp-media allows Stored XSS.This issue affects Google Drive WP Media: from n/a through = 2.4.4...

6.5CVSS7.2AI score0.00229EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/02/13 1:53 p.m.36 views

CVE-2025-26574 WordPress Google Drive WP Media plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Moch Amir Google Drive WP Media google-drive-wp-media allows Stored XSS.This issue affects Google Drive WP Media: from n/a through = 2.4.4...

6.5CVSS0.00229EPSS
SaveExploits0References1
CVE
CVE
added 2025/02/13 1:53 p.m.96 views

CVE-2025-26574

CVE-2025-26574 affects the Google Drive WP Media WordPress plugin (versions up to and including 2.4.4). The issue is a Cross-Site Scripting (Stored XSS) vulnerability caused by improper neutralization of input during web page generation. Public details in the sources indicate the vulnerability ex...

6.5CVSS7.2AI score0.00229EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/02/13 12:47 p.m.13 views

WordPress Google Drive WP Media plugin <= 2.4.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by muhammad yudha in WordPress Plugin Google Drive WP Media versions = 2.4.4...

6.5CVSS6.1AI score0.00229EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/02/13 12:00 a.m.11 views

WordPress plugin Google Drive WP Media 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site scripting...

6.5CVSS7.7AI score0.00229EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/05 1:54 a.m.14 views

CVE-2024-2086

The Integrate Google Drive – Browse, Upload, Download, Embed, Play, Share, Gallery, and Manage Your Google Drive Files Into Your WordPress Site plugin for WordPress is vulnerable to unauthorized access of data, modification of data, and loss of data due to a missing capability check on multiple...

10CVSS9AI score0.0074EPSS
SaveExploits0References1
Hacker One
Hacker One
added 2025/01/07 10:44 p.m.842 views

U.S. Dept Of Defense: Public google drive link Exposes Military Orders Containing PII (Name, SSN etc..) and Operational Details

A public Google Drive link was found that exposed military orders containing personally identifiable information PII such as full names, Social Security numbers, home addresses, and security clearance levels. The vulnerability was discovered on a website located at...

6.9AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2024/12/09 1:15 p.m.5 views

CVE-2023-32117

Missing Authorization vulnerability in princeahmed Integrate Google Drive integrate-google-drive allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Integrate Google Drive: from n/a through = 1.1.99...

9.8CVSS5.8AI score0.07133EPSS
SaveExploits0References4
NVD
NVD
added 2024/12/09 1:15 p.m.12 views

CVE-2023-32117

Missing Authorization vulnerability in SoftLab Integrate Google Drive allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Integrate Google Drive: from n/a through 1.1.99...

9.8CVSS0.07133EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/09 11:30 a.m.7 views

CVE-2023-32117 WordPress Integrate Google Drive plugin <= 1.1.99 - Unauthenticated Broken Access Control vulnerability

Missing Authorization vulnerability in princeahmed Integrate Google Drive integrate-google-drive allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Integrate Google Drive: from n/a through = 1.1.99...

9.8CVSS7.2AI score0.07133EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/09 12:00 a.m.8 views

WordPress plugin Integrate Google Drive 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS8.2AI score0.07133EPSS
SaveExploits0References1
The Hacker News
The Hacker News
added 2024/11/27 11:14 a.m.17 views

APT-C-60 Hackers Exploit StatCounter and Bitbucket in SpyGlace Malware Campaign

The threat actor known as APT-C-60 has been linked to a cyber attack targeting an unnamed organization in Japan that used a job application-themed lure to deliver the SpyGlace backdoor. That's according to findings from JPCERT/CC, which said the intrusion leveraged legitimate services like Google...

9.3CVSS7.7AI score0.02937EPSS
SaveExploits0
OSV
OSV
added 2024/10/21 1:09 a.m.8 views

MAL-2024-9444 Malicious code in google-drive-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b852e689dbc27ffdc82219196cc1caf6535bfe509fb8fdf6fab98a642c019c6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/10/21 1:09 a.m.10 views

Malicious code in google-drive-integration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b852e689dbc27ffdc82219196cc1caf6535bfe509fb8fdf6fab98a642c019c6d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
Rows per page
Query Builder