CVE-2026-74923: Document Gallery <= 5.1.1 - Unauthenticated Non-Public Attachment Disclosure via dg_generate_gallery and dg_generate_icons

Q: Who can exploit this issue?

Any unauthenticated user can exploit it. No login, capability, or ownership of the affected content is required.

Q: What information can be disclosed?

An attacker can enumerate media attached to unpublished, private, or trashed content and obtain attachment titles, descriptions, and direct file URLs.

Q: Which plugin versions are affected?

Document Gallery versions through 5.1.1 are affected.

Published Oct 16, 2026

Updated

The Document Gallery WordPress plugin through 5.1.1 does not perform any capability or ownership check when generating a gallery on demand, allowing unauthenticated users to enumerate and disclose the titles, descriptions and direct file URLs of media attached to unpublished, private or trashed content.

Affected Software

1 affected component

Document Gallery Document Gallery<=5.1.1

Event History

Oct 16, 2026

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

DescriptionWeakness

Frequently Asked Questions

Who can exploit this issue?

Any unauthenticated user can exploit it. No login, capability, or ownership of the affected content is required.

What information can be disclosed?

An attacker can enumerate media attached to unpublished, private, or trashed content and obtain attachment titles, descriptions, and direct file URLs.

Which plugin versions are affected?

Document Gallery versions through 5.1.1 are affected.

CVE-2026-74923: Document Gallery <= 5.1.1 - Unauthenticated Non-Public Attachment Disclosure via dg_generate_gallery and dg_generate_icons

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

What information can be disclosed?

Which plugin versions are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What information can be disclosed?

Which plugin versions are affected?