CVE-2026-81153 Robo Gallery < 5.2.6 - Author+ Stored XSS via Image Overlay Effect Meta

The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its image settings before outputting them in a gallery page, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing the...

CVE-2026-81153

The Robo Gallery WordPress plugin, in versions prior to 5.2.6 , is vulnerable to Stored Cross-Site Scripting (XSS) due to the failure to properly sanitise and escape certain image settings before they are rendered on a gallery page. This flaw allows users with Author roles or higher to inject mal...