EUVD-2015-9287

Malware in sbrugna...

CVE-2023-33310 WordPress Unite Gallery Lite plugin <= 1.7.59 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Valiano Unite Gallery Lite allows PHP Local File Inclusion.This issue affects Unite Gallery Lite: from n/a through 1.7.59...

CVE-2023-34183 WordPress Unite Gallery Lite Plugin <= 1.7.61 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Valiano Unite Gallery Lite plugin = 1.7.61 versions...

CVE-2023-34183

CVE-2023-34183 affects Unite Gallery Lite (WordPress plugin) versions 1.7.61 (i.e., 1.7.62 or later) or apply vendor-provided patch when available. Technical details in connected records corroborate the vulnerability type, affected version range, and remediation path.

CVE-2015-9446

The unite-gallery-lite plugin before 1.5 for WordPress has SQL injection via datagalleryID to wp-admin/admin-ajax.php...

CVE-2015-9447

The unite-gallery-lite plugin before 1.5 for WordPress has CSRF and SQL injection via wp-admin/admin.php galleryid or id parameters...

WordPress Unite Gallery Lite 1.4.6 CSRF / SQL Injection

Title: Cross-Site Request Forgery & SQL Injection Vulnerabilities in Unite Gallery Lite Wordpress Plugin v1.4.6 Submitter: Nitin Venkatesh Product: Unite Gallery Lite Wordpress Plugin Product URL: https://wordpress.org/plugins/unite-gallery-lite/ Vulnerability Type: Cross-site Request Forgery...