Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-93031— WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box <= 3.8.3 - Authenticated (Subscriber+) Arbitrary File Upload via Media Import

Quick assessment

Affected
WP Cloud Plugins/_deleeuw_ Use-your-Drive | Google Drive plugin for WordPress
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

WordPress 的 WP Cloud 插件系列（包括 Use-your-Drive、Out-of-the-Box、Share-one-Drive 和 Lets-Box）在 2.0 至 3.8.3（含 3.8.3）的所有版本中均存在任意文件上传漏洞，漏洞位于 函数中。 具体成因如下： 1. 由于导入操作通过 钩子注册，允许未经身份验证的用户触发； 2. 函数缺少权限检查； 3. 在将导入的文件写入上传目录之前，未验证文件的扩展名和文件内容是否匹配 所定义的可接受类型。 上述缺陷使得拥有订阅者（Subscriber

CVSS 8.8 · High
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-93031

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box <= 3.8.3 - Authenticated (Subscriber+) Arbitrary File Upload via Media Import
Source: CVE Program / CVE List V5
Vulnerability Description
The WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box plugins for WordPress are vulnerable to Arbitrary File Upload in all versions from 2.0 up to, and including, 3.8.3 via the download_file_to_uploads function. This is due to the import action being registered for unauthenticated users via wp_ajax_nopriv_, a missing capability check in can_import(), and the imported file's extension and contents not being validated against get_allowed_mime_types() before it is written to the uploads directory. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload files that may be executable, which makes remote code execution possible.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
危险类型文件的不加限制上传
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
WP Cloud Plugins/_deleeuw_ Use-your-Drive | Google Drive plugin for WordPress 2.0 ~ 3.8.3 -
_DeLeeuw_ Share-one-Drive | OneDrive & SharePoint plugin for WordPress 2.0 ~ 3.8.3 -
_DeLeeuw_ WP Cloud Plugins - Box (Lets-Box) 2.0 ~ 3.8.3 -
_DeLeeuw_ WP Cloud Plugins - Dropbox (Out-of-the-Box) 2.0 ~ 3.8.3 -

II. Public POCs for CVE-2026-93031

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-93031

请登录查看更多情报信息。

Other References for CVE-2026-93031 (1)

IV. Related Vulnerabilities

Same product: Use-your-Drive | Google Drive plugin for WordPress
Same vendor: WP Cloud Plugins/_deleeuw_
Same weakness: CWE-434

V. Comments for CVE-2026-93031

No comments yet

Leave a comment