CveMateVulnerability intelligence

Unknown Document Gallery vulnerabilities

5 vulnerabilities

Known vulnerabilities in Unknown Document Gallery, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2026-74922unknowndocument gallery1d ago19-10-2026 06:46

The Document Gallery WordPress plugin through 5.1.1 does not verify the signature on one of its unauthenticated webhook endpoints when no shared secret has been configured, which is the default state, allowing unauthenticated users to replace the thumbnail image the site publishes for any document.CVE-2026-74921unknowndocument gallery1d ago19-10-2026 06:46

The Document Gallery WordPress plugin through 5.1.1 does not sanitise or escape several gallery shortcode attributes before embedding them in a single-quoted HTML attribute in the rendered gallery markup, allowing users with the Contributor role and above to inject arbitrary event handlers that execute when a higher privileged user views the content.CVE-2026-74923unknowndocument gallery4d ago16-10-2026 06:00

The Document Gallery WordPress plugin through 5.1.1 does not perform any capability or ownership check when generating a gallery on demand, allowing unauthenticated users to enumerate and disclose the titles, descriptions and direct file URLs of media attached to unpublished, private or trashed content.CVE-2026-74920unknowndocument gallery5d ago15-10-2026 06:00

The Document Gallery WordPress plugin through 5.1.1 does not properly sanitise and escape user input before reflecting it inside an HTML attribute in the response of an unauthenticated AJAX action, leading to a Reflected Cross-Site Scripting vulnerability which can be exploited against any visitor, including a logged-in administrator.CVE-2026-12982unknowndocument gallery+12mo ago27-07-2026 06:00

The Document Gallery WordPress plugin before 5.1.1 does not properly sanitise and escape user input before reflecting it back in the response of an unauthenticated AJAX action, leading to a Reflected Cross-Site Scripting vulnerability which can be exploited against unauthenticated users.