CVE-2026-77114

Received Received - Intake

Stored XSS in Document Gallery WordPress Plugin

Publication date: 2026-10-14

Last updated on: 2026-10-15

Assigner: Wordfence

Description

The Document Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dg_thumber_webhook' Action Request Body in all versions up to, and including, 5.1.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires that logging be enabled in the plugin's Advanced settings, which is only the default state when WP_DEBUG is true; otherwise an administrator must manually enable it.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-10-14

EPSS Evaluated

2026-10-18

NVD

CVE-2026-77114

EUVD

EUVD-2026-100789

Affected Vendors & Products

Vendor	Product	Version / Range
danrossiter	Document	Gallery 0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-79	The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

Executive Summary

The Document Gallery WordPress plugin up to version 5.1.1 has a stored cross-site scripting vulnerability. It allows unauthenticated attackers to inject malicious scripts into web pages via the 'dg_thumber_webhook' action. The scripts execute when users access the infected pages.

Detection Guidance

Check if the Document Gallery plugin is installed and verify its version. If it is version 5.1.1 or lower, the system is vulnerable. Inspect web server logs for suspicious POST requests to the 'dg_thumber_webhook' endpoint containing script tags or unusual payloads.

Impact Analysis

Attackers could steal user sessions, redirect to malicious sites, or perform actions on behalf of users. This requires logging to be enabled, which is default only when WP_DEBUG is true or manually configured by an admin.

Compliance Impact

This vulnerability could lead to unauthorized data access or modification, violating GDPR (privacy) and HIPAA (health data protection) requirements. Organizations may face compliance penalties if exploited.

Mitigation Strategies

Update the Document Gallery plugin to the latest version beyond 5.1.1. Disable logging in the plugin's Advanced settings if it is enabled. Review and sanitize any logged requests for malicious scripts. Consider temporarily disabling the plugin if an update is not immediately available.

Hi! I’m here to help you understand CVE-2026-77114. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70