medium5.3
CVE-2026-74923
The Document Gallery WordPress plugin through 5.1.1 does not perform any capability or ownership check when generating a gallery on demand, allowing unauthenti…
Impact
The Document Gallery WordPress plugin through 5.1.1 does not perform any capability or ownership check when generating a gallery on demand, allowing unauthenticated users to enumerate and disclose the titles, descriptions and direct file URLs of media attached to unpublished, private or trashed content.
Affected products
| Product | Affected versions |
|---|---|
| Document Gallery WordPress Plugin | through 5.1.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.