High
CVE-2026-15360
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 23
Reset filters
High
CVE-2026-8141
Ajax Load More - Filters <= 3.4.1 - Unauthenticated Stored Cross-Site Scripting via 'taxonomy_include_children' Field
High
CVE-2026-6495
Ajax Load More – Infinite Scroll, Load More, & Lazy Load < 7.8.4 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2025-15525
Ajax Load More – Infinite Scroll, Lazy Load & Load More <= 7.8.1 - Incorrect Authorization to Unauthenticated Private/Draft Post Title and Excerpt Exposure
Medium
CVE-2025-59582
Ajax Load More <= 7.6.0.2 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2025-4775
WordPress Infinite Scroll – Ajax Load More <= 7.4.0.1 - Authenticated(Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-5586
WordPress Ajax Load More and Infinite Scroll <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Medium
CVE-2025-47630
Ajax Load More <= 7.3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-8505
WordPress Infinite Scroll - Ajax Load More <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via button_label Parameter
Medium
CVE-2024-4711
WordPress Infinite Scroll – Ajax Load More <= 7.1.1 - Authenticated (Contributor+) Cross-Site Scripting
Medium
CVE-2024-32110
Appsero <= 2.0.0 - Missing Authorization via handle_optin_optout
Medium
CVE-2026-15295
Ajax Load More <= 7.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-1790
Ajax Load More <= 7.0.1 - Authenticated (Admin+) Directory Traversal to Arbitrary File Read
Medium
CVE-2024-24704
Load More Anything <= 3.3.3 - Missing Authorization to Plugin Settings Modification
Medium
CVE-2023-50874
WordPress Infinite Scroll – Ajax Load More <= 6.1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-4466
WordPress Infinite Scroll - Ajax Load More <= 5.6.0.2 - Authenticated (Contributor+) Stored Cross Site Scripting via Shortcode
Medium
4f1cf0f3-faf2-43f7-a641-95bfa5d73ca8
Infinite Scroll – Ajax Load More <= 5.5.4 - Authenticated (Admin+) Arbitrary File Read via Directory Traversal
Medium
CVE-2022-2945
WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Directory Traversal
Medium
CVE-2022-2943
WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Authenticated (Admin+) Arbitrary File Read
High
CVE-2022-2433
WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Cross-Site Request Forgery to PHAR Deserialization
High
CVE-2021-24140
Ajax Load More plugin < 5.3.2 - SQL Injection
Critical
c1bb3ab9-afbb-40e7-967a-45f737777dcf
Ajax Load More < 2.11.2 - Local File Inclusion
High
CVE-2015-10140
WordPress Infinite Scroll – Ajax Load More <= 2.8.1.1 - Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.