What is the CVSS score of CVE-2026-12982?

CVE-2026-12982 has a CVSS 3.1 base score of 6.1 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N. EPSS exploitation probability: 0.2%.

Is there a public PoC exploit available for CVE-2026-12982?

Yes, a public proof-of-concept exploit is available for CVE-2026-12982. Prioritise patching immediately. EPSS: 0.2%.

Is there a patch available for CVE-2026-12982?

Yes, a patch is available for CVE-2026-12982. Update the affected software to the latest version immediately.

Document Gallery CVE-2026-12982

EUVD-2026-49068 MEDIUM

Cross-site Scripting (XSS) (CWE-79)

2026-07-27 WPScan

GHSA-7prg-mrx9-fj7w

WordPress XSS Document Gallery Unknown

6.1

CVSS 3.1 · Vendor: WPScan

Severity by source

Vendor (WPScan) PRIMARY

6.1 MEDIUM

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

vuln.today AI

6.1 MEDIUM

Consistent with description: unauthenticated network attack, low complexity, requires user interaction.

3.1 AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:Active/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

Primary rating from Vendor (WPScan).

CVSS VectorVendor: WPScan

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 27, 2026 - 15:32 vuln.today

Patch available

Jul 27, 2026 - 07:01 EUVD

CVE Published

Jul 27, 2026 - 06:00 cve.org

MEDIUM 6.1

CVE Published

Jul 27, 2026 - 06:00 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

The Document Gallery WordPress plugin before 5.1.1 does not properly sanitise and escape user input before reflecting it back in the response of an unauthenticated AJAX action, leading to a Reflected Cross-Site Scripting vulnerability which can be exploited against unauthenticated users.

AnalysisAI

Reflected cross-site scripting (XSS) in the WordPress Document Gallery plugin before version 5.1.1 allows unauthenticated attackers to inject malicious scripts via an unsanitized parameter in an AJAX action. A publicly available proof-of-concept exploit exists, increasing the immediate risk for sites running affected versions.

Technical ContextAI

The vulnerability is a classic Reflected XSS (CWE-79) affecting a WordPress plugin. WordPress AJAX actions are handlers that process requests without a full page reload; in this plugin, a user-supplied input is reflected back in the response without proper sanitization, allowing script injection. The CPE string cpe:2.3:a:unknown:document_gallery:*:*:*:*:*:*:*:* identifies the plugin, and the affected versions are all prior to 5.1.1.

RemediationAI

Upgrade the Document Gallery plugin to version 5.1.1 or later. The vendor has released this patched version. No practical workarounds exist other than temporarily deactivating the plugin, which would remove functionality. The WPScan reference provides confirmation of the fix.