Not rated
CVE-2021-24140 Unvalidated input in the Ajax Load More WordPress plugin, versions before 5.3.2, lead to SQL Injection in POST…
Description
Unvalidated input in the Ajax Load More WordPress plugin, versions before 5.3.2, lead to SQL Injection in POST /wp-admin/admin-ajax.php with param repeater=' or sleep(5)#&type=test.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Ajax Load More 5.3 | earliest → < 5.3.2 | 5.3.2 |
Other CVEs of Ajax Load More
The 4 CVEs of Ajax Load More →
CVE-2026-15360
The Ajax Load More WordPress plugin before 8.0.1 does not properly sanitise and escape a parameter before using it in a…
9.1
Critical
CVE-2026-6495
The Ajax Load More WordPress plugin before 7.8.4 does not sanitise and escape a parameter before outputting it back…
7.1
High
CVE-2015-10140
The Ajax Load More plugin before 2.8.1.2 does not have authorisation in some of its AJAX actions, allowing any…
8.8
High