Vulnerabilities

TI-2023-17027 CVE-2023-34183 · GHSA-v428-m98g-7mhx

WordPress Unite Gallery Lite Plugin <= 1.7.61 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Valiano Unite Gallery Lite plugin <= 1.7.61 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-08-30 No fix listed CWE-79

TI-2015-07822 CVE-2015-9445 · GHSA-mj48-h3vq-rr5x

The unite-gallery-lite plugin before 1.5 for WordPress has CSRF and SQL injection via…

MEDIUM 40

The unite-gallery-lite plugin before 1.5 for WordPress has CSRF and SQL injection via wp-admin/admin-ajax.php in a unitegallery_ajax_action operation.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01069 Published 2019-09-26 No fix listed CWE-352

TI-2015-07823 CVE-2015-9446 · GHSA-mw76-359p-w3vr

The unite-gallery-lite plugin before 1.5 for WordPress has SQL injection via data[galleryID] to wp-admin/admin-ajax.php.

MEDIUM 43

The unite-gallery-lite plugin before 1.5 for WordPress has SQL injection via data[galleryID] to wp-admin/admin-ajax.php.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02425 Published 2019-09-26 No fix listed CWE-89

TI-2015-07824 CVE-2015-9447 · GHSA-7pw8-62cf-7ff5

The unite-gallery-lite plugin before 1.5 for WordPress has CSRF and SQL injection via…

LOW 31

The unite-gallery-lite plugin before 1.5 for WordPress has CSRF and SQL injection via wp-admin/admin.php galleryid or id parameters.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0102 Published 2019-09-26 No fix listed CWE-352

Vulnerabilities

Filters

WordPress Unite Gallery Lite Plugin <= 1.7.61 is vulnerable to Cross Site Scripting (XSS)

The unite-gallery-lite plugin before 1.5 for WordPress has CSRF and SQL injection via…

The unite-gallery-lite plugin before 1.5 for WordPress has SQL injection via data[galleryID] to wp-admin/admin-ajax.php.

The unite-gallery-lite plugin before 1.5 for WordPress has CSRF and SQL injection via…