Input validation vulnerability in Integrate Google Drive – Browse, Upload, Download, Embed, Play, Share, Gallery, and Manage Your Google Drive Files Into Your WordPress Site 1.3.1

The Integrate Google Drive – Browse, Upload, Download, Embed, Play, Share, Gallery, and Manage Your Google Drive Files Into Your WordPress Site plugin is vulnerable to a security issue called Open Redirect. This vulnerability affects all versions of the plugin, up to and including version 1.3.1. Open Redirect occurs when insufficient validation is placed on the redirect URL that is supplied via the ‘state’ parameter. This means that unauthenticated attackers can redirect users to malicious sites if they can get the users to perform an action.