The Document Gallery WordPress plugin through 5.1.1 does not verify the signature on one of its unauthenticated webhook endpoints when no shared secret has been configured, which is the default state, allowing unauthenticated users to replace the thumbnail image the site publishes for any document.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Wordpress-extensions |
|
No data.
No data.
References
History
Tue, 20 Oct 2026 22:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Wordpress-extensions
Wordpress-extensions document Gallery |
|
| Vendors & Products |
Wordpress-extensions
Wordpress-extensions document Gallery |
Mon, 19 Oct 2026 12:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-287 |
Mon, 19 Oct 2026 10:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-345 | |
| Metrics |
ssvc
|
Mon, 19 Oct 2026 08:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-287 |
Mon, 19 Oct 2026 07:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The Document Gallery WordPress plugin through 5.1.1 does not verify the signature on one of its unauthenticated webhook endpoints when no shared secret has been configured, which is the default state, allowing unauthenticated users to replace the thumbnail image the site publishes for any document. | |
| Title | Document Gallery 4.1 - 5.1.1 - Unauthenticated Document Thumbnail Replacement via Thumber Webhook Signature Bypass | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: WPScan
Published: 2026-10-19T06:46:16.054Z
Updated: 2026-10-19T09:31:21.524Z
Reserved: 2026-08-17T11:27:43.418Z
Link: CVE-2026-74922
Vulnrichment
Updated: 2026-10-19T09:25:24.350Z
NVD
Status : Deferred
Published: 2026-10-19T07:16:31.760
Modified: 2026-10-19T21:02:51.987
Link: CVE-2026-74922
Redhat
No data.