craftcms/google-cloud vulnerabilities

Latest craftcms/google-cloud CVEs

Newest publication first

1. CVE-2026-32266 Google Cloud Storage for Craft CMS has an Information Disclosure Vulnerability

   Published 2026-03-18

   Low·CVSS 2.4 EPSS 0.37%

   The Google Cloud Storage for Craft CMS plugin provides a Google Cloud Storage integration for Craft CMS. In versions on the 2.x branch prior to 2.2.1, the DefaultController->actionLoadBucketData() endpoint allows unauthenticated users with a valid CSRF token to view a list of buc...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.