Ajax Load More (Unknown) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-08-05. Vendor: Unknown.

CVEs of Ajax Load More

• CVE-2026-15360 - CVSS 9.1 (critical), 2026-08-05: The Ajax Load More WordPress plugin before 8.0.1 does not properly sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated…
• CVE-2026-6495 - CVSS 7.1 (high), 2026-05-18: The Ajax Load More WordPress plugin before 7.8.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected…
• CVE-2015-10140 - CVSS 8.8 (high), 2025-07-22: The Ajax Load More plugin before 2.8.1.2 does not have authorisation in some of its AJAX actions, allowing any authenticated users, such as subscriber, to…
• CVE-2021-24140 - CVSS 7.2 (high), 2021-03-18: Unvalidated input in the Ajax Load More WordPress plugin, versions before 5.3.2, lead to SQL Injection in POST /wp-admin/admin-ajax.php with param repeater='…