What’s Vulnerable › Products
dcooney Ajax Load More – Infinite Scroll, Load More, & Lazy Load vulnerabilities
17 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.
Latest dcooney Ajax Load More – Infinite Scroll, Load More, & Lazy Load vulnerabilities
- CVE-2026-15360 — Ajax Load More < 8.0.1 - Unauthenticated SQL Injection via custom_args (CVSS 9.1)
- CVE-2026-15295 — Ajax Load More <= 7.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting (CVSS 4.4)
- CVE-2026-6495 — Ajax Load More < 7.8.4 - Reflected XSS (CVSS 7.1)
- CVE-2025-15525 — Ajax Load More – Infinite Scroll, Lazy Load & Load More <= 7.8.1 - Incorrect Authorization to Unauthenticated Private/Draft Post Title and Excerpt Exposure (CVSS 5.3)
- CVE-2025-59582 — WordPress Ajax Load More Plugin <= 7.6.0.2 - Sensitive Data Exposure Vulnerability (CVSS 5.3)
- CVE-2015-10140 — Ajax Load More < 2.8.1.2 - Subscriber+ File Upload & Deletion (CVSS 8.8)
- CVE-2025-4775 — WordPress Infinite Scroll – Ajax Load More <= 7.4.0.1 - Authenticated(Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
- CVE-2025-47630 — WordPress Ajax Load More plugin <= 7.3.1.2 - Cross Site Scripting (XSS) Vulnerability (CVSS 5.4)
- CVE-2024-8505 — WordPress Infinite Scroll - Ajax Load More <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via button_label Parameter (CVSS 5.4)
- CVE-2024-4711 — WordPress Infinite Scroll – Ajax Load More <= 7.1.1 - Authenticated (Contributor+) Cross-Site Scripting (CVSS 5.4)
- CVE-2024-1790 — Ajax Load More <= 7.0.1 - Authenticated (Admin+) Directory Traversal to Arbitrary File Read (CVSS 4.9)
- CVE-2023-50874 — WordPress Ajax Load More Plugin <= 6.1.0.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.4)
- CVE-2022-4466 — WordPress Infinite Scroll - Ajax Load More < 5.6.0.3 - Contributor+ Stored XSS (CVSS 5.4)
- CVE-2022-2945 — WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Directory Traversal (CVSS 2.7)
- CVE-2022-2943 — WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Authenticated (Admin+) Arbitrary File Read (CVSS 4.9)
- CVE-2022-2433 — WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Cross-Site Request Forgery to PHAR Deserialization (CVSS 7.5)
- CVE-2021-24140 — Ajax Load More < 5.3.2 - Authenticated SQL Injection (CVSS 7.2)