Catfolders Document Gallery Pro
Monthly
Catfolders Document Gallery Pro WordPress plugin before version 2.0.7 exposes private, unpublished folder contents to unauthenticated remote attackers through two compounding weaknesses: REST API routes that lack authorization checks, and a content-identifying token scheme that can be forged entirely client-side without prior authenticated access. Any network-accessible attacker can enumerate and download files from folders site administrators intentionally withheld from public publication. A publicly available proof-of-concept exists per WPScan, though EPSS places exploitation probability at 0.14% (3rd percentile), indicating limited observed opportunistic activity at time of analysis.
Catfolders Document Gallery Pro WordPress plugin before version 2.0.7 exposes private, unpublished folder contents to unauthenticated remote attackers through two compounding weaknesses: REST API routes that lack authorization checks, and a content-identifying token scheme that can be forged entirely client-side without prior authenticated access. Any network-accessible attacker can enumerate and download files from folders site administrators intentionally withheld from public publication. A publicly available proof-of-concept exists per WPScan, though EPSS places exploitation probability at 0.14% (3rd percentile), indicating limited observed opportunistic activity at time of analysis.