Live › vulnerability › CVE-2026-74923
Go to dashboardThe Document Gallery WordPress plugin through 5.1.1 skips permission checks when it builds a gallery on demand. An unauthenticated visitor can list titles, descriptions and direct file URLs of media attached to unpublished, private or trashed posts.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running the Document Gallery plugin at version 5.1.1 or earlier that attach documents to unpublished, private or trashed content. Sites that do not use the plugin, or that only attach public media, have less to lose but should still update. The sources do not say whether the flaw needs a particular gallery setting.
No product ranges from the sources yet.
wp-content/plugins/5.1.1 or earlier5.1.1Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
The Document Gallery WordPress plugin through 5.1.1 does not perform any capability or ownership check when generating a gallery on demand, allowing unauthenticated users to enumerate and disclose the titles, descriptions and direct file URLs of media attached to unpublished, private or trashed content.
This page as .md · .json · in your agent: get_signal("CVE-2026-74923")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.