A vulnerability was found in wp-google-drive Google Drive Plugin 2.2 on WordPress and classified as critical . This affects an unknown part of the file gdrive-ajaxs.php of the component Configuration File Handler . The manipulation of the argument file_name results in path traversal. This vulnerability is known as CVE-2018-25326 . It is possible to launch the attack remotely. Furthermore, an exploit is available.