cve/2015/CVE-2015-9445.md

CVE-2015-9445

Description

The unite-gallery-lite plugin before 1.5 for WordPress has CSRF and SQL injection via wp-admin/admin-ajax.php in a unitegallery_ajax_action operation.

POC

Reference

• http://packetstormsecurity.com/files/132842/
• https://wpvulndb.com/vulnerabilities/8113

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/ARPSyndicate/cvemon