Ajax Load More
Approved changes feed: RSS · Atom
cpe:2.3:a:connekthq:ajax_load_more:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Connekthq (d39e68b8-5073-5134-a811-46a1d8b54482) |
|---|---|
| Product | Ajax Load More (16499ca6-bf60-5449-a260-5a7758b3fec6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-47630 |
vulnerable | 2026-06-08 07:27:14.645013 |
WordPress Ajax Load More plugin <= 7.3.1.2 - Cross Site Scripting (XSS) Vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Darren Cooney Ajax Load More ajax-load-more allows Stored XSS.This issue affects Ajax Load More: from n/a through <= 7.3.1.2.
Published: 2025-05-07T14:20:38.219Z
Updated: 2026-04-28T16:12:47.343Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8505 |
vulnerable | 2026-06-08 07:00:24.805397 |
WordPress Infinite Scroll - Ajax Load More <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via button_label Parameter
MEDIUM (6.4)
The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘button_label’ parameter in all versions up to, and including, 7.1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2024-10-02T09:31:59.680Z
Updated: 2026-04-08T17:22:03.645Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4711 |
vulnerable | 2026-06-08 06:50:18.473541 |
WordPress Infinite Scroll – Ajax Load More <= 7.1.1 - Authenticated (Contributor+) Cross-Site Scripting
MEDIUM (6.4)
The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ajax_load_more shortcode in versions up to, and including, 7.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2024-06-01T02:32:47.560Z
Updated: 2026-04-08T17:30:35.671Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-50874 |
vulnerable | 2026-06-08 06:16:16.915346 |
WordPress Ajax Load More Plugin <= 6.1.0.1 is vulnerable to Cross Site Scripting (XSS)
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Darren Cooney WordPress Infinite Scroll – Ajax Load More allows Stored XSS.This issue affects WordPress Infinite Scroll – Ajax Load More: from n/a through 6.1.0.1.
Published: 2023-12-28T10:01:09.439Z
Updated: 2026-04-28T16:08:59.634Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4466 |
vulnerable | 2026-06-08 05:51:59.537295 |
WordPress Infinite Scroll - Ajax Load More < 5.6.0.3 - Contributor+ Stored XSS
The WordPress Infinite Scroll WordPress plugin before 5.6.0.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
Published: 2023-03-13T16:03:37.989Z
Updated: 2025-02-27T15:43:23.179Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2945 |
vulnerable | 2026-06-08 05:43:36.774781 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2943 |
vulnerable | 2026-06-08 05:43:36.774367 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-2433 |
vulnerable | 2026-06-08 05:43:35.537945 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24140 |
vulnerable | 2026-06-08 05:30:03.848332 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-10140 |
vulnerable | 2026-06-08 05:06:24.764620 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.