CVE-2015-9447

The CVE refers to the WordPress plugin Unite Gallery Lite prior to version 1.5. The vulnerability arises from CSRF and SQL injection via wp-admin/admin.php parameters named galleryid or id, indicating insufficient request validation that enables manipulation or unauthorized database queries. Seve...