References https://nvd.nist.gov/vuln/detail/CVE-2020-6418 https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2020/CVE-2020-6418.html https://www.sentinelone.com/vulnerability-database/cve-2020-6418/ https://starlabs.sg/blog/2022/12-deconstructing-and-exploiting-cve-2020-6418/ https://cloud.tencent.com/developer/article/1596997 https://www.cnblogs.com/Rain99-/p/14673789.html https://www.anquanke.com/post/id/201951 https://www.exploit-db.com/exploits/48186 https://www.nsfocus.com.cn/html/2020/39_0302/873.html https://github.com/SivaPriyaRanganatha/CVE-2020-6418
Related VulnerabilitiesPoCgoogle-api-key: Google API KeyWP Google 地图 < 9.0.48 - 未经身份验证的存储 XSS (CVE-2025-11307)PoCCVE-2026-8732: WP Maps Pro (wp-google-map-gold) <= 6.1.0 - Unauthenticated Administrator Account CreationPoCCVE-2026-4810: Google ADK-Python - Unauthenticated Builder EndpointPoCgoogle-gemini-key-exposure: Google Gemini API Key - ExposurePoCCVE-2024-13220: WordPress Google Map Professional - Cross-Site ScriptingPoCfreshrss-api: FreshRSS Google Reader API ExposurePoCgcloudignore-file-exposure: Google Cloud Ignore File ExposurePoCgoogle-calendar-exposure: Google Calendar - ExposurePoCwp-duracelltomi-google-tag-manager-fpd: WordPress Plugin Google Tag Manager - Full Path DisclosurePoCwp-googlecaptcha-fpd: WordPress Plugin reCaptcha by BestWebSoft (google-captcha) - Full Path DisclosurePoCCVE-2025-12139: Integrate Google Drive <= 1.5.3 - Information DisclosurePoCgcs-bucket-listing: Google Cloud Storage - Public Bucket Listing