VendorsUnitegalleryunite_gallery_liteall versions
Vulnerabilities

Unitegallery Unite Gallery Lite for WordPress

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2015-9446
The unite-gallery-lite plugin before 1.5 for WordPress has SQL injection via data[galleryID] to wp-admin/admin-ajax.php.
Published 2019-09-26 · Modified
8.8EPSS 0.024
CVE-2015-9445
The unite-gallery-lite plugin before 1.5 for WordPress has CSRF and SQL injection via wp-admin/admin-ajax.php in a unitegallery_ajax_action operation.
Published 2019-09-26 · Modified
8.8EPSS 0.011
CVE-2015-9447
The unite-gallery-lite plugin before 1.5 for WordPress has CSRF and SQL injection via wp-admin/admin.php galleryid or id parameters.
Published 2019-09-26 · Modified
6.5EPSS 0.010
CVE-2023-34183
WordPress Unite Gallery Lite Plugin <= 1.7.61 is vulnerable to Cross Site Scripting (XSS)
Published 2023-08-30 · Modified
5.9EPSS 0.004