Document Gallery
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:document_gallery:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Document Gallery (43c0f7ae-73b2-5719-b3aa-9cd9ea646202) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-74921 |
vulnerable | 2026-11-03 10:15:42.404246 |
Document Gallery 4.0 - 5.1.1 - Contributor+ Stored XSS via Gallery Shortcode Attributes
MEDIUM (6.8)
The Document Gallery WordPress plugin through 5.1.1 does not sanitise or escape several gallery shortcode attributes before embedding them in a single-quoted HTML attribute in the rendered gallery markup, allowing users with the Contributor role and above to inject arbitrary event handlers that execute when a higher privileged user views the content.
Published: 2026-10-19T06:46:15.459Z
Updated: 2026-10-19T09:31:21.665Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-74920 |
vulnerable | 2026-11-03 10:15:42.389878 |
Document Gallery <= 5.1.1 - Reflected XSS via data-shortcode Attribute
The Document Gallery WordPress plugin through 5.1.1 does not properly sanitise and escape user input before reflecting it inside an HTML attribute in the response of an unauthenticated AJAX action, leading to a Reflected Cross-Site Scripting vulnerability which can be exploited against any visitor, including a logged-in administrator.
Published: 2026-10-15T06:00:14.246Z
Updated: 2026-10-15T11:01:27.195Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-74922 |
vulnerable | 2026-11-03 10:15:42.369534 |
Document Gallery 4.1 - 5.1.1 - Unauthenticated Document Thumbnail Replacement via Thumber Webhook Signature Bypass
MEDIUM (5.3)
The Document Gallery WordPress plugin through 5.1.1 does not verify the signature on one of its unauthenticated webhook endpoints when no shared secret has been configured, which is the default state, allowing unauthenticated users to replace the thumbnail image the site publishes for any document.
Published: 2026-10-19T06:46:16.054Z
Updated: 2026-10-19T09:31:21.524Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-74923 |
vulnerable | 2026-11-03 10:15:42.320022 |
Document Gallery <= 5.1.1 - Unauthenticated Non-Public Attachment Disclosure via dg_generate_gallery and dg_generate_icons
The Document Gallery WordPress plugin through 5.1.1 does not perform any capability or ownership check when generating a gallery on demand, allowing unauthenticated users to enumerate and disclose the titles, descriptions and direct file URLs of media attached to unpublished, private or trashed content.
Published: 2026-10-16T06:00:13.033Z
Updated: 2026-10-16T14:49:21.732Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.