Skip to content
OpenAdvisories

Product · Dan Rossiter

Document Gallery

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.2
    CVE-2026-77114

    Document Gallery <= 5.1.1 - Unauthenticated Stored Cross-Site Scripting

    The Document Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dg_thumber_webhook' Action Request Body in all versions up to, and including, 5.1.1 due to insufficient input sanitization and output escaping. This makes it possible …

    Dan Rossiter Document Gallery Web / CMS
  • High 7.1
    CVE-2026-39781

    WordPress Document Gallery plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dan Rossiter Document Gallery document-gallery allows Reflected XSS.This issue affects Document Gallery: from n/a through 5.1.1.

    Dan Rossiter Document Gallery
  • High 7.1
    CVE-2026-57695

    WordPress Document Gallery plugin <= 5.1.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dan Rossiter Document Gallery document-gallery allows Reflected XSS.This issue affects Document Gallery: from n/a through <= 5.1.0.

    Dan Rossiter Document Gallery