Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Robo Gallery 5.2.6 Clear all filters
TI-2026-70446 CVE-2026-81156 · GHSA-7pc8-9p6q-7m5m

Stored XSS in Robo Gallery WordPress plugin gallery settings

Priority LOW 32

The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its gallery settings before outputting them on the gallery edit screen, allowing users with the Contributor role and above to store Java…

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.00282 Published 2026-10-11 Fixed in 5.2.6 CWE-79
TI-2026-70445 CVE-2026-81155 · GHSA-fpmp-8c24-ggh8

Stored cross-site scripting in Robo Gallery WordPress plugin

Priority LOW 32

The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape a gallery setting before outputting it on a frontend page, allowing users with the Author role and above to perform Stored Cross-Site Scripting…

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.00282 Published 2026-10-11 Fixed in 5.2.6 CWE-79
TI-2026-70444 CVE-2026-81154 · GHSA-5qfx-vjr9-8vhf

Stored cross-site scripting in Robo Gallery WordPress plugin via image alt text

Priority LOW 32

The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape image alt text before outputting it in one of its gallery layouts, allowing users with the Author role and above to perform Stored Cross-Site Sc…

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.00282 Published 2026-10-11 Fixed in 5.2.6 CWE-79
TI-2026-70443 CVE-2026-81153 · GHSA-hhc5-3q59-7gxq

Stored cross-site scripting in Robo Gallery via image overlay effect meta

Priority LOW 32

The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its image settings before outputting them in a gallery page, allowing users with the Author role and above to perform Stored Cross-Site…

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.00282 Published 2026-10-11 Fixed in 5.2.6 CWE-79