Unite Gallery Lite

Unite Gallery Lite has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2015 and 2024; 5 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 7.4, and the most serious one scores 9.9 out of 10. Severity breakdown: 1 critical and 3 high. 2015 was the busiest year with 3 disclosures.

The most common weakness is SQL Injection, behind 3 of the records (50%). Other recurring categories include Cross-Site Request Forgery (CSRF), Cross-Site Scripting.

5 of the records (83%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2024.

3 independent researchers contributed these findings, most of them (3) reported by Nitin Venkatesh.

Strategic Overview

Avg CVSSHigh

7.4/ 10

Patch Coverage83%

Open

Fixed

Get automatic notifications for all Unite Gallery Lite vulnerabilities before they are exploited.

Most severe open issueCVSS 9.9CVE-2024-43207

Unite Gallery Lite <= 1.7.62 - Authenticated (Contributor+) SQL Injection

Read the full analysis

Vulnerability Records

6 records


2024-08-09 00:00	Unite Gallery Lite <= 1.7.62 - Authenticated (Contributor+) SQL Injection Unite Gallery Lite <= 1.7.62	`CVE-2024-43207`	9.9 Critical	João Pedro Soares de Alcântara	No
2023-05-30 00:00	Unite Gallery Lite <= 1.7.61 - Authenticated (Administrator+) Stored Cross-Site Scripting Unite Gallery Lite <= 1.7.61	`CVE-2023-34183`	4.4 Medium	yuyudhn	Yes
2023-05-22 00:00	Unite Gallery Lite <= 1.7.59 - Authenticated(Administrator+) Local File Inclusion via 'view' parameter Unite Gallery Lite <= 1.7.59	`CVE-2023-33310`	5.0 Medium	yuyudhn	Yes
2015-07-25 00:00	Unite Gallery Lite <= 1.4.6 - Cross-Site Request Forgery & Authenticated SQL Injection Unite Gallery Lite <= 1.4.6	`CVE-2015-9445`	8.8 High	Nitin Venkatesh	Yes
2015-07-25 00:00	Unite Gallery Lite < 1.5 - SQL Injection Unite Gallery Lite < 1.5	`CVE-2015-9446`	8.8 High	Nitin Venkatesh	Yes
2015-07-25 00:00	Unite Gallery Lite < 1.5 - Cross-Site Request Forgery and SQL Injection Unite Gallery Lite < 1.5	`CVE-2015-9447`	7.2 High	Nitin Venkatesh	Yes

Showing 1–6 of 6 reports