CVE Database /
CVE-2026-32356
CVE · Medium
CVE-2026-32356 — Robo Gallery – Photo & Image Slider [robo-gallery] < 5.1.3
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2026-32356
|
Robo Gallery – Photo & Image Slider [robo-gallery] < 5.1.3 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
6.5
|
< 5.1.3
|
5.1.3 |
2026-02-14 |
—
|
CVE-2026-32356
The Robo Gallery plugin for WordPress contains a security flaw in versions up to 5.1.2, allowing malicious users with contributor or higher privileges to embed unauthorized code snippets into website content. This vulnerability enables attackers to inject executable scripts that can run when unsuspecting visitors access the compromised pages. The issue stems from inadequate filtering of user-submitted data and insufficient protection against script injection.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings