Unitegallery Unite_gallery_lite
4 CVEs affecting Unitegallery Unite_gallery_lite. Latest disclosed: 2023-08-30. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2015-9446 | High | 8.8 | 2019-09-26 | The unite-gallery-lite plugin before 1.5 for WordPress has SQL injection via data[galleryID] to wp-admin/admin-ajax.php. |
CVE-2015-9445 | High | 8.8 | 2019-09-26 | The unite-gallery-lite plugin before 1.5 for WordPress has CSRF and SQL injection via wp-admin/admin-ajax.php in a unitegallery_ajax_action operation. |
CVE-2015-9447 | Medium | 6.5 | 2019-09-26 | The unite-gallery-lite plugin before 1.5 for WordPress has CSRF and SQL injection via wp-admin/admin.php galleryid or id parameters. |
CVE-2023-34183 | Medium | 5.9 | 2023-08-30 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Valiano Unite Gallery Lite plugin <= 1.7.61 versions. |