CVE-2025-12139

HIGH NUCLEI

Google Drive WordPress Plugin <1.5.3 - Info Disclosure

Title source: llm

Description

The File Manager for Google Drive – Integrate Google Drive with WordPress plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.5.3 via the "get_localize_data" function. This makes it possible for unauthenticated attackers to extract sensitive data including Google OAuth credentials (client_id and client_secret) and Google account email addresses.

Exploits (1)

nomisec WORKING POC 1 stars
by Galaxy-sc · poc
https://github.com/Galaxy-sc/CVE-2025-12139-WordPress-Integrate-Google-Drive-Exploit

Nuclei Templates (1)

Integrate Google Drive <= 1.5.3 - Information Disclosure
HIGHVERIFIEDby Meysam Bal-afkan

References (5)

Scores

CVSS v3 7.5
EPSS 0.1561
EPSS Percentile 94.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-200
Status published
Products (1)
princeahmed/File Manager for Google Drive – Integrate Google Drive < 1.5.3
Published Nov 05, 2025
Tracked Since Feb 18, 2026