VulnSocial

CVE-2026-19717Disclosure

LOWCVSS 7.5 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The CatFolders Document Gallery & PDF Library WordPress plugin before 2.0.7 does not have authorisation checks in some of its REST API endpoints, allowing unauthenticated users to retrieve the title, type, size and URL of the media attachments assigned to any of its folders, including folders which are not published in any gallery on the site.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-200

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-08-16: 2Technical Details · 2026-08-16: 208-16
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-19717 The CatFolders Document Gallery & PDF Library WordPress plugin before 2.0.7 does not have authorisation checks in some of its REST API endpoints, allowing unauthentic… https://www.cve.org/CVERecord?id=CVE-2026-19717

    Post summary

    The post announces that CatFolders Document Gallery & PDF Library WordPress plugin versions before 2.0.7 lack authorization checks on certain REST API endpoints, potentially enabling unauthenticated access, but no evidence of exploitation or available fixes is mentioned.

    000101.1K
    58.0K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-19717 The CatFolders Document Gallery & PDF Library WordPress plugin before 2.0.7 does not have authorisation checks in some of its REST API endpoints, allowing unauthentic… https://www.cve.org/CVERecord?id=CVE-2026-19717 ----- Traducción: CVE-2026-19717 The… https://infoflow.cloud`

    Post summary

    The post announces CVE‑2026‑19717, revealing missing authorization checks in CatFolders’ WordPress plugin REST APIs that enable unauthenticated access.

    0000031
    99 followersView on X

Explore more

Back to dashboard