---
id: CVE-2026-74922
title: >-
  Document Gallery 4.1 - 5.1.1 - Unauthenticated Document Thumbnail Replacement
  via Thumber Webhook Signature Bypass
summary: >-
  The Document Gallery WordPress plugin through 5.1.1 does not verify the
  signature on one of its unauthenticated webhook endpoints when no shared
  secret has been configured, which is the default state, allowing
  unauthenticated users to re…
severity: medium
cvss: 5.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'
cvssSource: cna
cwe:
  - CWE-345
product: Document Gallery
affected:
  - document_gallery >= 4.1 <= 5.1.1
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-10-19T09:26:11.113813Z'
published: '2026-10-19'
updated: '2026-10-19'
sourceUpdated: '2026-10-19T09:31:21.524Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-74922'
references:
  - url: 'https://wpscan.com/vulnerability/850aaa4e-82ff-479f-bdcd-6cb8089325bd/'
tags:
  - cve.org
ingestedAt: '2026-10-19T07:09:59.591Z'
---

## Overview

The Document Gallery WordPress plugin through 5.1.1 does not verify the signature on one of its unauthenticated webhook endpoints when no shared secret has been configured, which is the default state, allowing unauthenticated users to replace the thumbnail image the site publishes for any document.

## Affected

- `document_gallery >= 4.1 <= 5.1.1`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.