What is the CVSS score of CVE-2026-57695?

CVE-2026-57695 has a CVSS 3.1 base score of 7.1 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L. EPSS exploitation probability: 0.3%.

Which versions of Document Gallery are affected by CVE-2026-57695?

The Dan Rossiter Document Gallery WordPress plugin (all versions through 5.1.0) contains an unauthenticated cross-site scripting vulnerability allowing attackers to inject malicious scripts into…

How to fix or mitigate CVE-2026-57695?

Within 24 hours, audit all WordPress installations to identify Dan Rossiter Document Gallery plugin versions 5.1.0 and earlier; disable or remove the plugin immediately if not operationally critical. Within 7 days, implement Web Application Firewall rules to block requests containing script injection payloads targeting the plugin's vulnerable endpoints, and restrict plugin access via IP allowlisting or authentication requirements if continued operation is necessary. Within 30 days, monitor Patchstack and the official WordPress plugin repository for a vendor security patch release; if no patch is available within 60 days, plan migration to an actively-maintained alternative gallery solution.

Document Gallery CVE-2026-57695

EUVD-2026-43356 HIGH

Cross-site Scripting (XSS) (CWE-79)

2026-07-13 Patchstack

WordPress XSS Wordpress Plugin Document Gallery

7.1

CVSS 3.1 · Vendor: Patchstack

Severity by source

Vendor (Patchstack) PRIMARY

7.1 HIGH

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

vuln.today AI

7.1 HIGH

Network-reachable reflected XSS needs no attacker auth (PR:N) but requires victim to open a crafted link (UI:R); script escapes component trust boundary (S:C) with limited C/I/A impact.

3.1 AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

4.0 AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:N

Primary rating from Vendor (Patchstack).

CVSS VectorVendor: Patchstack

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

Low

Lifecycle Timeline

Analysis Generated

Jul 13, 2026 - 10:52 vuln.today

CVE Published

Jul 13, 2026 - 08:41 cve.org

HIGH 7.1

DescriptionCVE.org

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dan Rossiter Document Gallery document-gallery allows Reflected XSS.This issue affects Document Gallery: from n/a through <= 5.1.0.

AnalysisAI

Reflected cross-site scripting in the Dan Rossiter Document Gallery WordPress plugin (all versions up to and including 5.1.0) lets an unauthenticated attacker inject script into a reflected response that executes in a victim's browser when they follow a crafted link. Because the CVSS scope is changed, the injected script can affect resources beyond the vulnerable component (e.g., the surrounding WordPress session context). This flaw was reported by Patchstack; no public exploit code has been identified and it is not listed in CISA KEV at time of analysis.

Technical ContextAI

The affected component is Document Gallery, a WordPress plugin (CPE cpe:2.3:a:dan_rossiter:document_gallery) used to display collections of documents/attachments in posts and pages. The root cause is CWE-79, Improper Neutralization of Input During Web Page Generation, in the reflected variant: user-controllable input (typically a request/query parameter) is echoed back into an HTML response without proper output encoding or input sanitization, so an attacker-supplied value is parsed as active markup/script. The scope-changed CVSS vector (S:C) indicates the executed script operates in the trust context of the WordPress site rather than being confined to an isolated component.

RemediationAI

No vendor-released patched version is named in the available data, so treat the primary action as upgrading to any release later than 5.1.0 once the maintainer publishes a fixed build, and monitor the Patchstack advisory (https://patchstack.com/database/Wordpress/Plugin/document-gallery/vulnerability/wordpress-document-gallery-plugin-5-1-0-cross-site-scripting-xss-vulnerability) and the plugin's WordPress.org listing for that release. Until a fixed version is confirmed, apply a Web Application Firewall or Patchstack virtual patch to filter script-injection payloads in requests to the plugin's endpoints, which adds request-inspection overhead and can be bypassed by novel encodings; alternatively deactivate and remove the Document Gallery plugin, which fully removes exposure at the cost of losing its document-listing functionality on the site. Restricting or sanitizing the reflected request parameters at the reverse proxy and setting a restrictive Content-Security-Policy that disallows inline script can further reduce the chance of injected script executing, though CSP may break legitimate inline scripts on the theme.