Document Gallery (Unknown) - vulnerabilities (CVEs)

5 CVEs, 4 in the last 30 days, 1 known versions, newest CVE from 2026-10-19. Vendor: Unknown.

CVEs of Document Gallery

• CVE-2026-74922 - CVSS 5.3 (medium), 2026-10-19: The Document Gallery WordPress plugin through 5.1.1 does not verify the signature on one of its unauthenticated webhook endpoints when no shared secret has…
• CVE-2026-74921 - CVSS 6.8 (medium), 2026-10-19: The Document Gallery WordPress plugin through 5.1.1 does not sanitise or escape several gallery shortcode attributes before embedding them in a single-quoted…
• CVE-2026-74923 - CVSS 5.3 (medium), 2026-10-16: The Document Gallery WordPress plugin through 5.1.1 does not perform any capability or ownership check when generating a gallery on demand, allowing…
• CVE-2026-74920 - CVSS 7.1 (high), 2026-10-15: The Document Gallery WordPress plugin through 5.1.1 does not properly sanitise and escape user input before reflecting it inside an HTML attribute in the…
• CVE-2026-12982 - CVSS 6.1 (medium), 2026-07-27: The Document Gallery WordPress plugin before 5.1.1 does not properly sanitise and escape user input before reflecting it back in the response of an…