CVE-2026-81154

The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape image alt text before outputting it in one of its gallery layouts, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any user viewing the affected...

CVE-2026-81156

The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its gallery settings before outputting them on the gallery edit screen, allowing users with the Contributor role and above to store JavaScript that executes in the context of an administrator who opens the gallery...

CVE-2026-81153

The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its image settings before outputting them in a gallery page, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing the...

CVE-2026-81155

The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape a gallery setting before outputting it on a frontend page, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing a gallery, includi...

CVE-2026-81154

The Robo Gallery WordPress plugin, in versions before 5.2.6 , is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the failure to properly sanitise and escape image alt text before outputting it in specific gallery layouts. This allows users with the Author role and above ...

CVE-2026-81153 Robo Gallery < 5.2.6 - Author+ Stored XSS via Image Overlay Effect Meta

The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its image settings before outputting them in a gallery page, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing the...

EUVD-2026-96749

The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape a gallery setting before outputting it on a frontend page, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing a gallery, includi...

EUVD-2026-96748

The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape image alt text before outputting it in one of its gallery layouts, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any user viewing the affected...

EUVD-2026-96747

The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its image settings before outputting them in a gallery page, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing the...

CVE-2026-81154 Robo Gallery < 5.2.6 - Author+ Stored XSS via Image Alt Text

The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape image alt text before outputting it in one of its gallery layouts, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any user viewing the affected...

EUVD-2026-96750

The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its gallery settings before outputting them on the gallery edit screen, allowing users with the Contributor role and above to store JavaScript that executes in the context of an administrator who opens the gallery...

CVE-2026-81153

The Robo Gallery WordPress plugin, in versions prior to 5.2.6 , is vulnerable to Stored Cross-Site Scripting (XSS) due to the failure to properly sanitise and escape certain image settings before they are rendered on a gallery page. This flaw allows users with Author roles or higher to inject mal...

CVE-2026-81155

The Robo Gallery WordPress plugin, in versions prior to 5.2.6 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitize and escape a gallery setting before it is rendered on a frontend page. This allows users with the Author role or higher to inject...

CVE-2026-81156 Robo Gallery < 5.2.6 - Contributor+ Stored XSS via Gallery Settings

The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its gallery settings before outputting them on the gallery edit screen, allowing users with the Contributor role and above to store JavaScript that executes in the context of an administrator who opens the gallery...

CVE-2026-81155 Robo Gallery < 5.2.6 - Author+ Stored XSS via Gallery Search Label

The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape a gallery setting before outputting it on a frontend page, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing a gallery, includi...

CVE-2026-81156

The Robo Gallery WordPress plugin, in versions prior to 5.2.6 , is vulnerable to Stored Cross-Site Scripting (XSS) . The issue stems from a failure to sanitise and escape certain gallery settings before they are displayed on the gallery edit screen. This allows users with Contributor role privile...

CVE-2026-81156: Improper Neutralization of Input During Web Page Generation

The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its gallery settings before outputting them on the gallery edit screen, allowing users with the Contributor role and above to store JavaScript that executes in the context of an administrator who opens the gallery...

CVE-2026-81154: Improper Neutralization of Input During Web Page Generation

The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape image alt text before outputting it in one of its gallery layouts, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any user viewing the affected...

CVE-2026-81155: Improper Neutralization of Input During Web Page Generation

The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape a gallery setting before outputting it on a frontend page, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing a gallery, includi...

CVE-2026-81153: Improper Neutralization of Input During Web Page Generation

The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its image settings before outputting them in a gallery page, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing the...