CVE-2024-35670 WordPress Integrate Google Drive plugin <= 1.3.93 - Broken Access Control vulnerability

Q: What is CVE-2024-35670?

CVE-2024-35670 is a medium-severity authentication bypass vulnerability in SoftLab Integrate Google Drive, published on 4 Jun 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.

Q: Is CVE-2024-35670 being exploited?

There is no known exploitation of CVE-2024-35670 in the wild and no public exploit code.

Q: How do I fix CVE-2024-35670?

No fix has been published for CVE-2024-35670 yet. Limit exposure of the affected software until one is available.

Medium 5.3 Published 4 Jun 2024 Updated 28 Apr 2026

Attackers can bypass authentication in the Integrate Google Drive WordPress plugin, potentially gaining unauthorized access to protected features.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2024-35670?

CVE-2024-35670 is a medium-severity authentication bypass vulnerability in SoftLab Integrate Google Drive, published on 4 Jun 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Broken Authentication vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through 1.3.93.

Weakness: CWE-287

Which versions are affected by CVE-2024-35670?

It affects 1 product.

Products include Softlabbd Integrate Google Drive.

How do I fix CVE-2024-35670?

No fix has been published for CVE-2024-35670 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2024-35670 being exploited?

There is no known exploitation of CVE-2024-35670 in the wild and no public exploit code.

Sources

Also known as GHSA-j8c5-63vq-fhwp.