CVE-2026-74920
7.1HighPublished 15 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
- Impact
- Limited impact
- Weakness
- CWE-79
Impact
Attackers can execute arbitrary JavaScript in a victim's browser session—including logged-in admins—to hijack accounts or perform unauthorized actions. This requires tricking a user into clicking a crafted malicious link.
Root cause
The plugin reflects unvalidated and unescaped user input inside an HTML attribute during an unauthenticated AJAX action.
Affected systems
Document Gallery WordPress plugin through version 5.1.1
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Fix & remediation
Upgrade Document Gallery to a version above 5.1.1 once released by the vendor; if patching is unavailable, deactivate or remove the plugin immediately.
$ wp plugin deactivate document-galleryAI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
The Document Gallery WordPress plugin through 5.1.1 does not properly sanitise and escape user input before reflecting it inside an HTML attribute in the response of an unauthenticated AJAX action, leading to a Reflected Cross-Site Scripting vulnerability which can be exploited against any visitor, including a logged-in administrator.