CVE-2026-15958

9.3 Critique

Publiée le 04/08/2026 à 09:16 · Modifiée le 26/08/2026 à 18:31 · Analyse NVD reportée · Source : contact@wpscan.com

Description

The Easy Integration for Dropbox WordPress plugin before 2.2.0 does not perform authorization checks on several of its file-management AJAX actions that it also registers for unauthenticated users, allowing an unauthenticated attacker to list, download and upload arbitrary files across the connected Dropbox account and to read the connected account and administrator email addresses.

Traduire en français

Produits concernés

Unknown Easy Integration for Dropbox

Scores CVSS

Version	Score	Source	Vecteur
3.1	9.3 Critique	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N`

Faiblesses (CWE)

CWE-862

Références

https://wpscan.com/vulnerability/e424157e-b79f-4000-8dcc-51413581fdec/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories