CVE-2026-19430

5.3 Moyenne

Publiée le 29/08/2026 à 08:17 · Modifiée le 31/08/2026 à 22:14 · Analyse NVD reportée · Source : contact@wpscan.com

Description

The Catfolders Document Gallery Pro WordPress plugin before 2.0.7 does not authorise some of its REST API routes, and the token identifying the requested content is forgeable client side, allowing unauthenticated users to list and download the contents of folders that were never published on the site.

Traduire en français

Produits concernés

Unknown Catfolders Document Gallery Pro

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.3 Moyenne	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N`

Faiblesses (CWE)

CWE-862

Références

https://wpscan.com/vulnerability/ebf45bc7-a782-48b6-99ca-25bc78697e20/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories