CVE-2026-74920

Document Gallery <= 5.1.1 - Reflected XSS via data-shortcode Attribute

The Document Gallery WordPress plugin through 5.1.1 does not properly sanitise and escape user input before reflecting it inside an HTML attribute in the response of an unauthenticated AJAX action, leading to a Reflected Cross-Site Scripting vulnerability which can be exploited against any visitor, including a logged-in administrator.

Affected

Document Gallery

CVSS v3.1 CNA

7.1 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

EPSS

0.15% chance of exploitation in the next 30 days, 3rd percentile

Published

2026-10-15

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/aa80cef6-b2fd-47ef-bac9-53438aa27573/

References

• CVE Record
• NVD entry