EUVD-2026-68049
GHSA-8782-6pv6-48w2
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Unauthenticated network REST API access with no complexity; impact is partial confidentiality loss only - no integrity or availability consequence.
Primary rating from Vendor (WPScan).
CVSS VectorVendor: WPScan
Lifecycle Timeline
5DescriptionCVE.org
The Catfolders Document Gallery Pro WordPress plugin before 2.0.7 does not authorise some of its REST API routes, and the token identifying the requested content is forgeable client side, allowing unauthenticated users to list and download the contents of folders that were never published on the site.
AnalysisAI
Catfolders Document Gallery Pro WordPress plugin before version 2.0.7 exposes private, unpublished folder contents to unauthenticated remote attackers through two compounding weaknesses: REST API routes that lack authorization checks, and a content-identifying token scheme that can be forged entirely client-side without prior authenticated access. Any network-accessible attacker can enumerate and download files from folders site administrators intentionally withheld from public publication. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Target site must be running Catfolders Document Gallery Pro at version 2.0.6 or earlier with the WordPress REST API accessible over the network (enabled by default in all modern WordPress installations). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) accurately characterizes this as a low-complexity, unauthenticated network attack with limited confidentiality impact and no integrity or availability risk. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade Catfolders Document Gallery Pro to version 2.0.7 or later; this is the vendor-released patch confirmed by the WPScan advisory (https://wpscan.com/vulnerability/ebf45bc7-a782-48b6-99ca-25bc78697e20/) and EUVD-2026-68049. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-862 – Missing Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today