Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:ajax_load_more:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductAjax Load More (d926b910-6c35-5bd7-8913-bb3f024df27d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-6495 vulnerable 2026-06-08 08:07:04.839213 Ajax Load More < 7.8.4 - Reflected XSS
The Ajax Load More WordPress plugin before 7.8.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Published: 2026-05-18T06:00:09.061Z
Updated: 2026-05-18T15:04:42.855Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24140 vulnerable 2026-06-08 05:30:03.847317 Ajax Load More < 5.3.2 - Authenticated SQL Injection
Unvalidated input in the Ajax Load More WordPress plugin, versions before 5.3.2, lead to SQL Injection in POST /wp-admin/admin-ajax.php with param repeater=' or sleep(5)#&type=test.
Published: 2021-03-18T14:57:49.000Z
Updated: 2024-08-03T19:21:18.284Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-10140 vulnerable 2026-06-08 05:06:24.763742 Ajax Load More < 2.8.1.2 - Subscriber+ File Upload & Deletion
The Ajax Load More plugin before 2.8.1.2 does not have authorisation in some of its AJAX actions, allowing any authenticated users, such as subscriber, to upload and delete arbitrary files.
Published: 2025-07-22T13:20:59.054Z
Updated: 2026-01-09T20:22:04.848Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.