CVE-2015-9446

The unite-gallery-lite plugin before 1.5 for WordPress has SQL injection via datagalleryID to wp-admin/admin-ajax.php...

PT-2019-7405

Name of the Vulnerable Software and Affected Versions unite-gallery-lite plugin versions prior to 1.5 Description The issue allows for SQL injection. This can be achieved through the datagalleryID variable in the /wp-admin/admin-ajax.php API endpoint. Recommendations For unite-gallery-lite plugin...

CVE-2015-9446: Improper Neutralization of Special Elements used in an SQL Command

The unite-gallery-lite plugin before 1.5 for WordPress has SQL injection via datagalleryID to wp-admin/admin-ajax.php...