CVE-2026-19717

The CVE refers to the CatFolders Document Gallery & PDF Library WordPress plugin, affected in versions before 2.0.7. The underlying issue is missing authorization checks in certain REST API endpoints, allowing unauthenticated users to retrieve metadata (title, type, size, URL) of media attachment...