CVE-2026-74923: Document Gallery 0 through 5.1.1

Affected technology

Document Gallery · 0 through 5.1.1
Vendor not specified by the source

Description’s affected range: through 5.1.1 does not perform any capability or ownership check when generating a gallery on demand

Component: Not specified by the source

What an attacker can do

The source says the Document Gallery WordPress plugin through 5.1.1 does not perform any capability or ownership check when generating a gallery on demand, allowing unauthenticated users to enumerate and disclose the titles, descriptions and direct file URLs of media attached to unpublished, private or trashed content.