Log in Start free

SoftLab

Products

ProductCVEsExploitedLatest
Integrate Google Drive5–Dec 9, 2024
Radio Player5–Jun 11, 2024
Dracula Dark Mode - The Revolutionary Dark Mode Plugin For WordPress1–Mar 27, 2024
Integrate Google Drive – Browse, Upload, Download, Embed, Play, Share, Gallery, and Manage Your Google Drive Files Into Your WordPress Site1–Dec 7, 2023
Upload Fields for WPForms1–Jun 9, 2024

Exploited and recent CVEs

  • CVE-2023-32117 Critical 9.8 WordPress Integrate Google Drive plugin <= 1.1.99 - Unauthenticated Broken Access Control vulnerability 7.3%
  • CVE-2023-52177 Medium 5.4 WordPress Integrate Google Drive plugin <= 1.3.3 - Broken Access Control vulnerability 0.3%
  • CVE-2024-34753 Medium 5.3 WordPress Radio Player plugin <= 2.0.73 - Broken Access Control vulnerability 0.3%
  • CVE-2024-35661 Medium 5.3 WordPress Upload Fields for WPForms plugin <= 1.0.2 - Broken Access Control vulnerability 0.4%
  • CVE-2024-32813 Medium 5.3 WordPress Integrate Google Drive plugin <= 1.3.9 - Broken Access Control vulnerability 0.3%
  • CVE-2024-35670 Medium 5.3 WordPress Integrate Google Drive plugin <= 1.3.93 - Broken Access Control vulnerability 0.4%
  • CVE-2024-33592 Medium 5.4 WordPress Radio Player plugin <= 2.0.73 - Server Side Request Forgery (SSRF) vulnerability 0.3%
  • CVE-2024-32506 Medium 5.4 WordPress Radio Player plugin <= 2.0.73 - Sensitive Data Exposure vulnerability 0.4%
  • CVE-2024-29771 Medium 6.5 WordPress Dracula Dark Mode plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-29811 Medium 6.5 WordPress Radio Player plugin <= 2.0.73 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-2906 Medium 6.5 WordPress Radio Player plugin <= 2.0.73 - Unauthenticated Broken Access Control vulnerability 0.5%
  • CVE-2023-49769 Medium 4.3 WordPress Integrate Google Drive Plugin <= 1.3.4 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
  • CVE-2023-47548 Medium 4.7 WordPress Integrate Google Drive Plugin <= 1.3.2 is vulnerable to Open Redirection 0.4%