What is GHSA-8782-6pv6-48w2?

GHSA-8782-6pv6-48w2 is a security advisory published by GitHub Security Advisories with Medium severity. The Catfolders Document Gallery Pro WordPress plugin before 2.0.7 does not authorise some of its...

Which CVE IDs does GHSA-8782-6pv6-48w2 cover?

GHSA-8782-6pv6-48w2 covers the following CVE IDs: CVE-2026-19430. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-8782-6pv6-48w2?

GHSA-8782-6pv6-48w2 has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

GHSA-8782-6pv6-48w2MediumCVSS 5.3

The Catfolders Document Gallery Pro WordPress plugin before 2.0.7 does not authorise some of its...

Vendor

GitHub Security Advisories

Published

August 29, 2026

Last Modified

August 30, 2026

🔗 CVE IDs covered (1)

CVE-2026-19430 →

📋 Description

The Catfolders Document Gallery Pro WordPress plugin before 2.0.7 does not authorise some of its REST API routes, and the token identifying the requested content is forgeable client side, allowing unauthenticated users to list and download the contents of folders that were never published on the site.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-19430
https://wpscan.com/vulnerability/ebf45bc7-a782-48b6-99ca-25bc78697e20
https://github.com/advisories/GHSA-8782-6pv6-48w2