Craftcms Google Cloud vulnerabilities

1 vulnerability

Known vulnerabilities in Craftcms Google Cloud, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

2.4CVE-2026-32266craftcmsgoogle-cloud
EPSS score
0.48%
The Google Cloud Storage for Craft CMS plugin provides a Google Cloud Storage integration for Craft CMS. In versions on the 2.x branch prior to 2.2.1, the `DefaultController->actionLoadBucketData()` endpoint allows unauthenticated users with a valid CSRF token to view a list of buckets that the plugin is allowed to see. Users should update to version 2.2.1 of the plugin to mitigate the issue.