CVE-2026-12982

UNKNOWN 0.0

Document Gallery < 5.1.1 - Reflected XSS via dg_generate_gallery

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

The Document Gallery WordPress plugin before 5.1.1 does not properly sanitise and escape user input before reflecting it back in the response of an unauthenticated AJAX action, leading to a Reflected Cross-Site Scripting vulnerability which can be exploited against unauthenticated users.

Vendor	unknown
Product	document gallery
Published	Jul 27, 2026

Stay Ahead of the Next One

Get instant alerts for unknown document gallery

Be the first to know when new unknown vulnerabilities affecting unknown document gallery are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Unknown / Document Gallery

0 < 5.1.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

wpscan.com: https://wpscan.com/vulnerability/a3c279ce-5db1-4331-ad74-4eef49619737/

Credits

João Ramos Maciel WPScan