Stored Cross-Site Scripting in Google Drive Plugin for WordPress

CVE-2025-7050

What is CVE-2025-7050?

The Use-your-Drive | Google Drive plugin for WordPress has a vulnerability that allows attackers to exploit the 'title' parameter in file metadata. This issue arises from inadequate input sanitization and output escaping, enabling the injection of arbitrary web scripts that execute when a user accesses the compromised page. Notably, even the lowest authentication level permitted for file uploads, including unauthenticated users, can exploit this vulnerability once a file upload shortcode is publicly visible.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References