Unknown Robo Gallery vulnerabilities

4 CVEs affecting Unknown Robo Gallery, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-81156, published 2026-10-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-81156, published 2026-10-11. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its gallery settings before outputting them on the gallery edit screen, allowing users with the Contributor role…
CVE-2026-81155, published 2026-10-11. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape a gallery setting before outputting it on a frontend page, allowing users with the Author role and above to perform Stored…
CVE-2026-81154, published 2026-10-11. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape image alt text before outputting it in one of its gallery layouts, allowing users with the Author role and above to…
CVE-2026-81153, published 2026-10-11. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its image settings before outputting them in a gallery page, allowing users with the Author role and above to…