Unknown Catfolders Document Gallery & PDF Library vulnerabilities

2 CVEs affecting Unknown Catfolders Document Gallery & PDF Library, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-84930, published 2026-09-05.

More from Unknown.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-19717, published 2026-08-16. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. The CatFolders Document Gallery & PDF Library WordPress plugin before 2.0.7 does not have authorisation checks in some of its REST API endpoints, allowing unauthenticated users to retrieve the title,…
• CVE-2026-84930, published 2026-09-05. Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days. The CatFolders Document Gallery & PDF Library WordPress plugin before 2.0.7 does not properly validate a block attribute before using it as an HTML tag name in its gallery output, allowing users with…