PT-2026-73125 · WordPress · Catfolders Document Gallery & Pdf Library
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
CatFolders Document Gallery & PDF Library WordPress plugin versions prior to 2.0.7
Description
Lack of authorization checks in certain REST API endpoints allows unauthenticated users to retrieve sensitive information about media attachments. This includes the title, type, size, and URL of attachments assigned to any folder, even those not published in a site gallery.
Recommendations
Update the plugin to version 2.0.7 or later.
Exploit
Fix
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Catfolders Document Gallery & Pdf Library