Skip to content
Sign in
6.8 Medium

CVE-2026-81155 The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape a gallery setting before outputting it on a…

Description

The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape a gallery setting before outputting it on a frontend page, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing a gallery, including administrators.

Affected products and versions

Product Affected versions Fixed in
Robo Gallery 5.2 earliest → < 5.2.6 5.2.6

Other CVEs of Robo Gallery

The 4 CVEs of Robo Gallery →
CVE-2026-81156 The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its gallery settings before… 6.8 Medium CVE-2026-81154 The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape image alt text before outputting it in… 6.8 Medium CVE-2026-81153 The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its image settings before… 6.8 Medium
Track this CVE