CVE-2026-74923
Received Received - Intake

Unauthenticated Media File Disclosure in Document Gallery WordPress Plugin

Publication date: 2026-10-16

Last updated on: 2026-10-16

Assigner: WPScan

Description
The Document Gallery WordPress plugin through 5.1.1 does not perform any capability or ownership check when generating a gallery on demand, allowing unauthenticated users to enumerate and disclose the titles, descriptions and direct file URLs of media attached to unpublished, private or trashed content.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-16
Last Modified
2026-10-16
Generated
2026-10-16
AI Q&A
2026-10-16
EPSS Evaluated
N/A
NVD
CVE-2026-74923
EUVD
EUVD-2026-102686

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Unknown Document Gallery 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects the Document Gallery WordPress plugin version 5.1.1 or earlier. It allows unauthenticated users to access non-public attachments by exploiting functions that generate galleries or icons. The flaw enables disclosure of titles, descriptions, and direct file URLs of media files attached to unpublished, private, or trashed content without proper permission checks.

Detection Guidance

To detect this vulnerability, check if your WordPress site uses the Document Gallery plugin version 5.1.1 or earlier. Test by accessing the following URLs directly: /wp-admin/admin-ajax.php?action=dg_generate_gallery and /wp-admin/admin-ajax.php?action=dg_generate_icons. If these return media file details without authentication, the site is vulnerable.

Impact Analysis

Unauthenticated users could access sensitive media files that should be restricted, such as unpublished, private, or trashed content. This could lead to unauthorized disclosure of confidential information, including file URLs, titles, and descriptions.

Mitigation Strategies

Immediately update the Document Gallery plugin to the latest version if available. If no update exists, consider disabling or removing the plugin until a patch is released. Restrict access to admin-ajax.php if possible and monitor for unauthorized access attempts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-74923. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart