CVE-2026-15958
Easy Dropbox Integration < 2.2.0 - Unauthenticated Arbitrary Connected Dropbox File Access and Upload via nopriv AJAX
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Easy Integration for Dropbox WordPress plugin before 2.2.0 does not perform authorization checks on several of its file-management AJAX actions that it also registers for unauthenticated users, allowing an unauthenticated attacker to list, download and upload arbitrary files across the connected Dropbox account and to read the connected account and administrator email addresses.
| Vendor | unknown |
| Product | easy integration for dropbox |
| Published | Aug 4, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown easy integration for dropbox
Be the first to know when new unknown vulnerabilities affecting unknown easy integration for dropbox are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Easy Integration for Dropbox
0 < 2.2.0
References
Credits
Pablo González Pérez Francisco José Ramírez Vicente and Iñigo Sánchez Enciso WPScan