EUVD-2026-96748

The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape image alt text before outputting it in one of its gallery layouts, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any user viewing the affected...

EUVD-2026-96747

The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its image settings before outputting them in a gallery page, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing the...

CVE-2026-81156

The Robo Gallery WordPress plugin, in versions prior to 5.2.6 , is vulnerable to Stored Cross-Site Scripting (XSS) . The issue stems from a failure to sanitise and escape certain gallery settings before they are displayed on the gallery edit screen. This allows users with Contributor role privile...

CVE-2026-14854

The WooCommerce Bookings WordPress plugin, in versions prior to 3.11.0 , is vulnerable to an unauthenticated Denial of Service (DoS) . The flaw exists because the plugin fails to limit a user-supplied value used for memory allocation within an unauthenticated AJAX action . An unauthenticated atta...

CVE-2026-81154 Robo Gallery < 5.2.6 - Author+ Stored XSS via Image Alt Text

The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape image alt text before outputting it in one of its gallery layouts, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any user viewing the affected...

CVE-2026-81153

The Robo Gallery WordPress plugin, in versions prior to 5.2.6 , is vulnerable to Stored Cross-Site Scripting (XSS) due to the failure to properly sanitise and escape certain image settings before they are rendered on a gallery page. This flaw allows users with Author roles or higher to inject mal...

CVE-2026-81155

The Robo Gallery WordPress plugin, in versions prior to 5.2.6 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitize and escape a gallery setting before it is rendered on a frontend page. This allows users with the Author role or higher to inject...

CVE-2026-81156 Robo Gallery < 5.2.6 - Contributor+ Stored XSS via Gallery Settings

The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its gallery settings before outputting them on the gallery edit screen, allowing users with the Contributor role and above to store JavaScript that executes in the context of an administrator who opens the gallery...

CVE-2026-81155 Robo Gallery < 5.2.6 - Author+ Stored XSS via Gallery Search Label

The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape a gallery setting before outputting it on a frontend page, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing a gallery, includi...

CVE-2026-14854 WooCommerce Bookings < 3.11.0 - Unauthenticated Denial of Service

The WooCommerce Bookings WordPress plugin before 3.11.0 does not limit a user-supplied value before using it to allocate memory in one of its unauthenticated AJAX actions, allowing unauthenticated attackers to exhaust server memory and cause a Denial of Service with a single request...

EUVD-2026-96746

The WooCommerce Bookings WordPress plugin before 3.11.0 does not limit a user-supplied value before using it to allocate memory in one of its unauthenticated AJAX actions, allowing unauthenticated attackers to exhaust server memory and cause a Denial of Service with a single request...

CVE-2026-81154

The Robo Gallery WordPress plugin, in versions before 5.2.6 , is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is the failure to properly sanitise and escape image alt text before outputting it in specific gallery layouts. This allows users with the Author role and above ...

EUVD-2026-96740

The Envira Gallery WordPress plugin before 1.16.2 does not verify that an image identifier added to a gallery refers to a media attachment the caller is permitted to view, allowing any user able to create and edit a gallery Author and above by default to disclose the title and excerpt of other...

EUVD-2026-96739

The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user holds the capability WordPress reserves for installing Envira Gallery WordPress plugin before 1.16.2 code before processing its setup-wizard Envira Gallery WordPress plugin before 1.16.2-installation request, and does n...

EUVD-2026-96741

The Envira Gallery WordPress plugin before 1.16.2 does not correctly check authorization on its gallery-conversion feature, verifying that the requester can edit an arbitrary post they name rather than that they are allowed to create the Envira Gallery WordPress plugin before 1.16.2's own gallery...

EUVD-2026-96742

The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user is authorized to read a gallery before rendering it, allowing authors to embed and expose other users' non-public gallery metadata to unauthenticated visitors...

EUVD-2026-96743

The WeddingCity Lite WordPress plugin through 1.0.4 does not perform any authorisation or validity checks before deleting posts, pages and media attachments, allowing unauthenticated attackers to permanently delete arbitrary content site-wide...

CVE-2026-104684

The Envira Gallery WordPress plugin, in versions prior to 1.16.2 , is vulnerable to an Insecure Direct Object Reference (IDOR) via shortcode. The plugin fails to verify if a user is authorized to read a gallery before rendering it. This flaw allows authors to embed and expose non-public gallery m...

CVE-2026-104681

The Envira Gallery WordPress plugin versions prior to 1.16.2 is vulnerable to unauthorized information disclosure. The root cause is a failure to verify that an image identifier added to a gallery corresponds to a media attachment the caller is permitted to access. This allows users with gallery ...

CVE-2026-104682 Envira Gallery < 1.16.2 - Contributor Missing Authorization via Convert Gallery REST Route

The Envira Gallery WordPress plugin before 1.16.2 does not correctly check authorization on its gallery-conversion feature, verifying that the requester can edit an arbitrary post they name rather than that they are allowed to create the Envira Gallery WordPress plugin before 1.16.2's own gallery...