WordPress Document Gallery plugin 4.1-5.1.1 - Unauthenticated Document Thumbnail Replacement vulnerability

Unauthenticated Document Thumbnail Replacement vulnerability discovered by Artus KG in WordPress Plugin Document Gallery versions 4.1-5.1.1...

Nextcloud: Combination of content provider allows private data disclosure

Good afternoon. Sorry, its me again .. I use NC on a daily basis so I often makes some checks .. As per 489105, document thumbnail shall not be disclosed. The exposure on thumbnailCache/ is an already know issue. However, malicious apps are still able to extract at least pictures and text files b...