CVE-2026-81155 Robo Gallery < 5.2.6 - Author+ Stored XSS via Gallery Search Label

The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape a gallery setting before outputting it on a frontend page, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing a gallery, includi...

CVE-2026-81155

The Robo Gallery WordPress plugin, in versions prior to 5.2.6 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitize and escape a gallery setting before it is rendered on a frontend page. This allows users with the Author role or higher to inject...