Plugin icon

Document Gallery

document-gallery
Plugin closed

Vulnerabilities:

8

Last Updated:

December 9, 2025

Active Installs:

8000

Published
Title
Fixed in
CVSS
Published
2026-10-13
Title
Document Gallery <= 5.1.1 - Unauthenticated Stored Cross-Site Scripting
Fixed in
No known fix
CVSS
7.2 (high)
Published
2026-10-13
Title
Document Gallery 4.1 - 5.1.1 - Unauthenticated Document Thumbnail Replacement via Thumber Webhook Signature Bypass
Fixed in
No known fix
CVSS
5.3 (medium)
Published
2026-10-13
Title
Document Gallery <= 5.1.1 - Unauthenticated Non-Public Attachment Disclosure via dg_generate_gallery and dg_generate_icons
Fixed in
No known fix
CVSS
5.3 (medium)
Published
2026-10-13
Title
Document Gallery 4.0 - 5.1.1 - Contributor+ Stored XSS via Gallery Shortcode Attributes
Fixed in
No known fix
CVSS
6.8 (medium)
Published
2026-10-13
Title
Document Gallery <= 5.1.1 - Reflected XSS via data-shortcode Attribute
Fixed in
No known fix
CVSS
7.1 (high)
Published
2026-10-05
Title
Document Gallery <= 5.1.1 - Unauthenticated Stored Cross-Site Scripting
Fixed in
No known fix
CVSS
7.2 (high)
Published
2026-07-10
Title
Document Gallery < 5.1.1 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 5.1.1
CVSS
7.2 (high)
Published
2026-07-06
Title
Document Gallery < 5.1.1 - Reflected XSS via dg_generate_gallery
Fixed in
Fixed in 5.1.1
CVSS
7.1 (high)