Live › vulnerability › CVE-2026-74921
Go to dashboardThe Document Gallery WordPress plugin through 5.1.1 does not sanitise or escape several gallery shortcode attributes before writing them into HTML. A contributor-level user can inject event handlers that run in the browser of a higher-privileged user who views the page.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running the Document Gallery WordPress plugin version 5.1.1 or earlier where users with Contributor or higher roles can create content with the gallery shortcode. The exposure is stored script execution against editors and administrators who view that content. Sites without the plugin, or where only trusted administrators write content, face less practical risk.
No product ranges from the sources yet.
wp plugin get document-gallery --field=version5.1.1, if the vendor has released one (unknown from the sources)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
The Document Gallery WordPress plugin through 5.1.1 does not sanitise or escape several gallery shortcode attributes before embedding them in a single-quoted HTML attribute in the rendered gallery markup, allowing users with the Contributor role and above to inject arbitrary event handlers that execute when a higher privileged user views the content.
This page as .md · .json · in your agent: get_signal("CVE-2026-74921")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.