Valiano vulnerabilities

Products

• Unite Gallery Lite 3

Latest Valiano CVEs

Newest publication first

1. CVE-2024-43207 WordPress Unite Gallery Lite plugin <= 1.7.62 - SQL Injection vulnerability

   Published 2024-08-18

   High·CVSS 8.5 EPSS 0.40%

   Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Valiano Unite Gallery Lite.This issue affects Unite Gallery Lite: from n/a through 1.7.62.

2. CVE-2023-33310 WordPress Unite Gallery Lite plugin <= 1.7.59 - Local File Inclusion vulnerability

   Published 2024-05-17

   Medium·CVSS 6.0 EPSS 0.68%

   Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Valiano Unite Gallery Lite allows PHP Local File Inclusion.This issue affects Unite Gallery Lite: from n/a through 1.7.59.

3. CVE-2023-34183 WordPress Unite Gallery Lite Plugin <= 1.7.61 is vulnerable to Cross Site Scripting (XSS)

   Published 2023-08-30

   Medium·CVSS 4.8 EPSS 0.37%

   Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Valiano Unite Gallery Lite plugin <= 1.7.61 versions.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.