SQL Injection Vulnerability in Unite Gallery Lite Plugin for WordPress
CVE-2015-9446

8.8HIGH

Key Information:

Vendor: Wordpress
Status: Unite Gallery Lite
Vendor: CVE Published:; 26 September 2019

What is CVE-2015-9446?

The Unite Gallery Lite plugin for WordPress is susceptible to an SQL injection vulnerability that can be exploited via the data[galleryID] parameter. This flaw allows attackers to send crafted requests to wp-admin/admin-ajax.php, potentially leading to unauthorized access to sensitive data or manipulation of the database. Users of the plugin are strongly advised to update to the latest version to mitigate this risk.