File Manager for Google Drive – Integrate Google Drive

File Manager for Google Drive – Integrate Google Drive has 14 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2026; 13 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 5.9, and the most serious one scores 10.0 out of 10. Severity breakdown: 1 critical and 2 high. 2023 was the busiest year with 5 disclosures.

The most common weakness is Missing Authorization, behind 8 of the records (57%). Other recurring categories include Cross-Site Request Forgery (CSRF), Cross-Site Scripting.

13 of the records (93%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2026.

11 independent researchers contributed these findings, most of them (3) reported by Steven Julian.

Strategic Overview

Avg CVSSMedium

5.9/ 10

Patch Coverage93%

Open

Fixed

Get automatic notifications for all File Manager for Google Drive – Integrate Google Drive vulnerabilities before they are exploited.

Most severe open issueCVSS 4.3CVE-2026-24540

Integrate Google Drive <= 1.5.6 - Missing Authorization

Read the full analysis

Vulnerability Records

14 records


2026-04-30 17:17	Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter File Manager for Google Drive <= 1.4.9	`CVE-2024-13362`	6.1 Medium	Asaf Mozes	Yes
2026-01-24 00:00	Integrate Google Drive <= 1.5.6 - Missing Authorization File Manager for Google Drive <= 1.5.6	`CVE-2026-24540`	4.3 Medium	Nabil Irawan	No
2025-11-04 17:38	File Manager for Google Drive – Integrate Google Drive with WordPress <= 1.5.3 - Unauthenticated Sensitive Information Exposure File Manager for Google Drive <= 1.5.3	`CVE-2025-12139`	7.5 High	ifoundbug	Yes
2025-07-30 00:00	Integrate Google Drive <= 1.5.2 - Cross-Site Request Forgery File Manager for Google Drive <= 1.5.2	`CVE-2025-54703`	4.3 Medium	Ananda Dhakal	Yes
2024-06-03 00:00	Integrate Google Drive <= 1.3.93 - Missing Authorization File Manager for Google Drive <= 1.3.93	`CVE-2024-35670`	5.3 Medium	Steven Julian	Yes
2024-04-22 00:00	Integrate Google Drive <= 1.3.8 - Missing Authorization File Manager for Google Drive <= 1.3.8	`CVE-2024-32949`	5.3 Medium	Steven Julian	Yes
2024-04-22 00:00	Integrate Google Drive <= 1.3.9 - Missing Authorization File Manager for Google Drive <= 1.3.9	`CVE-2024-32813`	6.5 Medium	Steven Julian	Yes
2024-03-29 00:00	Integrate Google Drive <= 1.3.8 - Missing Authorization to Unauthenticated Settings Modification and Export File Manager for Google Drive <= 1.3.8	`CVE-2024-2086`	10.0 Critical	Krzysztof Zając	Yes
2023-12-29 00:00	Integrate Google Drive <= 1.3.3 - Missing Authorization via save_settings File Manager for Google Drive <= 1.3.3	`CVE-2023-52177`	4.3 Medium	Nguyen Xuan Chien	Yes
2023-12-05 00:00	Integrate Google Drive <= 1.3.4 - Cross-Site Request Forgery File Manager for Google Drive <= 1.3.4	`CVE-2023-49769`	4.3 Medium	Kévin Mosbahi (Mika)	Yes

Showing 1–10 of 14 reports