Advisories · Technology

_DeLeeuw_ WP Cloud Plugins - Box (Lets-Box).

Every CVE that names _DeLeeuw_ WP Cloud Plugins - Box (Lets-Box) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-93031 CVE record

CVSS 8.8 High

WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box <= 3.8.3 - Authenticated (Subscriber+) Arbitrary File Upload via Media Import
- WP Cloud Plugins/_deleeuw_ Use-your-Drive | Google Drive plugin for WordPress
- _DeLeeuw_ Share-one-Drive | OneDrive & SharePoint plugin for WordPress
- Unrestricted file upload
Not analysed yet 18 Sept 2026