Unrated severityNVD Advisory· Published Oct 11, 2026

CVE-2026-81155

Description

The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape a gallery setting before outputting it on a frontend page, allowing users with the Author role and above to perform Stored Cross-Site Scripting attacks that execute in the browser of any visitor viewing a gallery, including administrators.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Robo Galleryllm-fuzzy
Range: <5.2.6
Package: https://wordpress.org/plugins/robo-gallery

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/e6b574c6-1999-4318-a9aa-9529aeceeb8b/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000