CVE-2023-47548: 
WordPress vulnerability analysis and mitigation

CVE-2023-47548 is a URL Redirection to Untrusted Site ('Open Redirect') vulnerability affecting the WordPress plugin 'Integrate Google Drive – Browse, Upload, Download, Embed, Play, Share, Gallery, and Manage Your Google Drive Files Into Your WordPress Site' versions through 1.3.2. The vulnerability was discovered and reported by researcher minhtuanact on March 29, 2023, and was publicly disclosed on November 7, 2023 (Patchstack).

The vulnerability is classified as an Open Redirect issue with a CVSS v3.1 Base Score of 6.1 MEDIUM (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) according to NIST NVD assessment, while Patchstack rates it at 4.7 MEDIUM (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N). The vulnerability is tracked as CWE-601: URL Redirection to Untrusted Site (NVD).

This vulnerability could allow a malicious actor to redirect users from one site to another due to the redirect URL not being validated. Users could be tricked into visiting a legitimate site only to be redirected to a malicious site, potentially leading to phishing incidents (Patchstack).

The vulnerability has been fixed in version 1.3.3 of the plugin. Users are advised to update to version 1.3.3 or later to remove the vulnerability. The security issue is considered to have a low severity impact and is unlikely to be exploited (Patchstack).