CVE-2026-74920: high-severity vulnerability in Document Gallery
Document Gallery <= 5.1.1 - Reflected XSS via data-shortcode Attribute
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
63Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck and has a public proof of concept.
ssvc Actcvss 7.1epss 0.1%
from disclosure to weapon
Published on NVDOct 15
VulnCheckOct 15
The Document Gallery WordPress plugin through 5.1.1 does not properly sanitise and escape user input before reflecting it inside an HTML attribute in the response of an unauthenticated AJAX action, leading to a Reflected Cross-Site Scripting vulnerability which can be exploited against any visitor, including a logged-in administrator.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Affected products
Unknown · Document Gallerypublic PoCs found — 1
cve_referencewpscan.com/vulnerability/aa80cef6-b2fd-47ef-bac9-53438aa27573/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Document Gallery
In the same product, most dangerous first.
CVE-2026-12982MEDIUMDocument Gallery < 5.1.1 - Reflected XSS via dg_generate_galleryEPSS 0.3%CVE-2026-74921MEDIUMDocument Gallery 4.0 - 5.1.1 - Contributor+ Stored XSS via Gallery Shortcode AttributesEPSS 0.2%CVE-2026-74923MEDIUMDocument Gallery <= 5.1.1 - Unauthenticated Non-Public Attachment Disclosure via dg_generate_gallery and dg_generate_iconsEPSS 0.2%CVE-2026-74922MEDIUMDocument Gallery 4.1 - 5.1.1 - Unauthenticated Document Thumbnail Replacement via Thumber Webhook Signature BypassEPSS 0.1%