CVE-2026-74922: medium-severity vulnerability in Document Gallery
Document Gallery 4.1 - 5.1.1 - Unauthenticated Document Thumbnail Replacement via Thumber Webhook Signature Bypass
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
33Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 5.3epss 0.1%
The Document Gallery WordPress plugin through 5.1.1 does not verify the signature on one of its unauthenticated webhook endpoints when no shared secret has been configured, which is the default state, allowing unauthenticated users to replace the thumbnail image the site publishes for any document.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected products
Unknown · Document Gallerypublic PoCs found — 1
cve_referencewpscan.com/vulnerability/850aaa4e-82ff-479f-bdcd-6cb8089325bd/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Document Gallery
In the same product, most dangerous first.
CVE-2026-12982MEDIUMDocument Gallery < 5.1.1 - Reflected XSS via dg_generate_galleryEPSS 0.3%CVE-2026-74921MEDIUMDocument Gallery 4.0 - 5.1.1 - Contributor+ Stored XSS via Gallery Shortcode AttributesEPSS 0.2%CVE-2026-74923MEDIUMDocument Gallery <= 5.1.1 - Unauthenticated Non-Public Attachment Disclosure via dg_generate_gallery and dg_generate_iconsEPSS 0.2%CVE-2026-74920HIGHDocument Gallery <= 5.1.1 - Reflected XSS via data-shortcode AttributeEPSS 0.1%