Vulnerabilities / Document Gallery
Document Gallery vulnerabilities
Advisories WPSec published for Document Gallery. Other sources may list more. Its attack surface: Document Gallery on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-29 | WPSEC-2026-1958 | Document Gallery <= 5.1.1 - Reflected Cross-Site Scripting via 'mime_types' Parameter | Medium 6.1 | 5.1.2 |
| 2026-10-29 | WPSEC-2026-1957 | Document Gallery <= 5.1.1 - Unauthenticated Sensitive Information Exposure of Non-Public Attachments | Medium 5.3 | 5.1.2 |
| 2026-10-29 | WPSEC-2026-1956 | Document Gallery <= 5.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mime_types' Shortcode Attribute | Medium 6.4 | 5.1.2 |
License: CC BY 4.0