{
 "id": "WPSEC-2026-1957",
 "url": "https://wpsec.com/vuln/WPSEC-2026-1957/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-1957/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-1957/index.md",
 "title": "Document Gallery <= 5.1.1 - Unauthenticated Sensitive Information Exposure of Non-Public Attachments",
 "description": "The Document Gallery plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.1.1, due to the dg_generate_icons and dg_generate_gallery AJAX actions, which are available to logged-out visitors, returning thumbnails and gallery listings for attachments without checking that the requester may read them. This makes it possible for unauthenticated attackers to obtain the titles, links and thumbnails of attachments belonging to private or draft content.",
 "plugin": {
  "slug": "document-gallery",
  "name": "Document Gallery",
  "full_name": "Document Gallery",
  "wordpress_org": "https://wordpress.org/plugins/document-gallery/",
  "advisories_url": "https://wpsec.com/vuln/plugin/document-gallery/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/document-gallery"
 },
 "type": "SENSITIVE DATA DISCLOSURE",
 "cwe": [
  "CWE-200"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 5.3,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "5.1.2",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 5.1.2"
  ]
 },
 "introduced_in": null,
 "fixed_in": "5.1.2",
 "remediation": "Update to 5.1.2 or later.",
 "fix_released": "2026-10-28T14:44:08+00:00",
 "published": "2026-10-29T18:50:39+00:00",
 "updated": "2026-10-29T17:47:37.008172+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-1957/",
  "https://plugins.svn.wordpress.org/document-gallery/tags/5.1.2/",
  "https://wordpress.org/plugins/document-gallery/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/document-gallery",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "Medium",
  "affected_versions": "Medium",
  "as_of": "2026-10-29"
 }
}