What’s Vulnerable › Products

Document Gallery vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Document Gallery version is affected

Latest Document Gallery vulnerabilities

• CVE-2026-74922 — Document Gallery 4.1 - 5.1.1 - Unauthenticated Document Thumbnail Replacement via Thumber Webhook Signature Bypass (CVSS 5.3)
• CVE-2026-74921 — Document Gallery 4.0 - 5.1.1 - Contributor+ Stored XSS via Gallery Shortcode Attributes (CVSS 6.8)
• CVE-2026-74923 — Document Gallery <= 5.1.1 - Unauthenticated Non-Public Attachment Disclosure via dg_generate_gallery and dg_generate_icons (CVSS 5.3)
• CVE-2026-74920 — Document Gallery <= 5.1.1 - Reflected XSS via data-shortcode Attribute (CVSS 7.1)
• CVE-2026-12982 — Document Gallery < 5.1.1 - Reflected XSS via dg_generate_gallery (CVSS 6.1)