CVE-2015-9446

CVE-2015-9446 affects the Unite Gallery Lite WordPress plugin (pre-1.5). The vulnerability is an SQL injection via data[galleryID] sent to wp-admin/admin-ajax.php, allowing the attacker to manipulate queries in the plugin’s context. Public references identify the issue in Unite Gallery Lite versi...