Use-your-Drive | Google Drive plugin for WordPress

Use-your-Drive | Google Drive plugin for WordPress has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2026; all 3 are fixed as of October 2026. Their average CVSS score is 7.4, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 2 high.

The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type.

Every one of the 3 issues recorded for Use-your-Drive | Google Drive plugin for WordPress has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSHigh

7.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Use-your-Drive | Google Drive plugin for WordPress vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2026-93031

WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box <= 3.8.3 - Authenticated (Subscriber+) Arbitrary File Upload via Media Import

Read the full analysis

Vulnerability Records

3 records


2026-09-17 00:00	WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box <= 3.8.3 - Authenticated (Subscriber+) Arbitrary File Upload via Media Import Use-your-Drive 2.0 – 3.8.3	`CVE-2026-93031`	8.8 High	WP Cloud Plugins	Yes
2025-08-04 00:00	Use-your-Drive \| Google Drive plugin for WordPress <= 3.3.1- Unauthenticated Stored Cross-Site Scripting via File Metadata Use-your-Drive <= 3.3.1	`CVE-2025-7050`	7.2 High	floerer	Yes
2021-12-06 00:00	Use-Your-Drive < 1.18.3 - Reflected Cross-Site Scripting Use-your-Drive < 1.18.3	`CVE-2021-42546`	6.1 Medium	Trainer Red	Yes

Showing 1–3 of 3 reports