WordPress plugin
Robo Gallery – Photo & Image Slider security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical1
- High2
- Medium22
- Low0
All Robo Gallery – Photo & Image Slider vulnerabilities
- Medium6.4Authenticated (Author+) Stored Cross-Site Scripting
≤5.2.5Update to 5.2.6
- Medium6.4Authenticated (Author+) Stored Cross-Site Scripting
≤5.2.5Update to 5.2.6
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤5.2.5Update to 5.2.6
- Medium6.4Authenticated (Author+) Stored Cross-Site Scripting
≤5.2.5Update to 5.2.6
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤5.1.6Update to 5.2.6
- Medium6.4Authenticated (Author+) Stored Cross-Site Scripting via 'Loading Label' Setting
≤5.1.3Update to 5.1.4
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤5.1.2Update to 5.1.3
- Medium6.4Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library
≤6.0.4Update to 6.0.5
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
≤5.0.2Update to 5.0.3
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤3.2.21Update to 3.2.22
- Medium4.4Authenticated (Admin+) Stored Cross-Site Scripting
≤3.2.23Update to 3.2.24
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤3.2.21Update to 3.2.22
- Medium6.4Authenticated (Author+) Stored Cross-Site Scripting
≤3.2.21Update to 3.2.22
- Medium4.3Missing Authorization to Authenticated (Subscriber+) Private Gallery Title Disclosure
≤3.2.21Update to 3.2.22
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Gallery Title
≤3.2.19Update to 3.2.20
- Medium6.4Authenticated (Author+) Stored Cross-Site Scripting via Image Title
≤3.2.19Update to 3.2.20
- High8.8Cross-Site Request Forgery to Post Creation and Limited Data Loss
≤3.2.19Update to 3.2.20
- Medium5.3Unauthenticated Information Exposure
≤3.2.18Update to 3.2.19
- Medium6.4Authenticated (Author+) Stored Cross-Site Scripting
≤3.2.17Update to 3.2.18
- Medium4.4Authenticated(Administrator+) Stored Cross-Site Scripting
≤3.2.15Update to 3.2.16
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
≤3.2.12Update to 3.2.13
- Medium4.3Cross-Site Request Forgery via getPluginStatus
≤3.2.9Update to 3.2.11
- Medium4.3Cross-Site Request Forgery
≤3.2.11Update to 3.2.12
- High8.1Missing Authorization
≤3.2.9Update to 3.2.11
- Critical9.8Remote Code Execution
<2.0.15Update to 2.0.15
Robo Gallery – Photo & Image Slider: common questions
Does Robo Gallery – Photo & Image Slider have known vulnerabilities?
Yes. VulnCrest Radar lists 25 known vulnerabilities in Robo Gallery – Photo & Image Slider: 1 critical, 2 high, 22 medium. At least one is not fixed in the latest version.
How do I check which version of Robo Gallery – Photo & Image Slider I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Robo Gallery – Photo & Image Slider vulnerability?
CVE-2026-81153, published Oct 9, 2026: Robo Gallery <= 5.2.5 - Authenticated (Author+) Stored Cross-Site Scripting. Severity: Medium (CVSS 6.4).
Is any Robo Gallery – Photo & Image Slider vulnerability listed in CISA KEV?
No. None of the known Robo Gallery – Photo & Image Slider vulnerabilities is currently listed in the CISA KEV catalog.