Advisories · Technology

Document Gallery.

Every CVE that names Document Gallery among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-74922 CVE record

CVSS 5.3 Medium

Document Gallery 4.1 - 5.1.1 - Unauthenticated Document Thumbnail Replacement via Thumber Webhook Signature Bypass
- Document Gallery
- CWE-345
Not analysed yet 19 Oct 2026
CVE-2026-74921 CVE record

CVSS 6.8 Medium

Document Gallery 4.0 - 5.1.1 - Contributor+ Stored XSS via Gallery Shortcode Attributes
- Document Gallery
- Cross-site scripting (XSS)
Not analysed yet 19 Oct 2026
CVE-2026-74923 CVE record

CVSS 5.3 Medium

Document Gallery <= 5.1.1 - Unauthenticated Non-Public Attachment Disclosure via dg_generate_gallery and dg_generate_icons
- Document Gallery
- Information disclosure
Not analysed yet 16 Oct 2026
CVE-2026-74920 CVE record

CVSS 7.1 High

Document Gallery <= 5.1.1 - Reflected XSS via data-shortcode Attribute
- Document Gallery
- Cross-site scripting (XSS)
Not analysed yet 15 Oct 2026
CVE-2026-12982 CVE record

CVSS 6.1 Medium

Document Gallery < 5.1.1 - Reflected XSS via dg_generate_gallery
- Document Gallery
- Cross-site scripting (XSS)
Not analysed yet 27 Jul 2026