CVE-2026-74923: medium-severity vulnerability in Document Gallery
Document Gallery <= 5.1.1 - Unauthenticated Non-Public Attachment Disclosure via dg_generate_gallery and dg_generate_icons
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
33Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 5.3epss 0.2%
The Document Gallery WordPress plugin through 5.1.1 does not perform any capability or ownership check when generating a gallery on demand, allowing unauthenticated users to enumerate and disclose the titles, descriptions and direct file URLs of media attached to unpublished, private or trashed content.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
Unknown · Document Gallerypublic PoCs found — 1
cve_referencewpscan.com/vulnerability/23254461-f638-4fb7-817b-776c0db18a67/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Document Gallery
In the same product, most dangerous first.
CVE-2026-12982MEDIUMDocument Gallery < 5.1.1 - Reflected XSS via dg_generate_galleryEPSS 0.3%CVE-2026-74921MEDIUMDocument Gallery 4.0 - 5.1.1 - Contributor+ Stored XSS via Gallery Shortcode AttributesEPSS 0.2%CVE-2026-74920HIGHDocument Gallery <= 5.1.1 - Reflected XSS via data-shortcode AttributeEPSS 0.1%CVE-2026-74922MEDIUMDocument Gallery 4.1 - 5.1.1 - Unauthenticated Document Thumbnail Replacement via Thumber Webhook Signature BypassEPSS 0.1%