9.1
Critical
CVE-2026-15360 The Ajax Load More WordPress plugin before 8.0.1 does not properly sanitise and escape a parameter before using it in a…
Description
The Ajax Load More WordPress plugin before 8.0.1 does not properly sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated attackers to perform time-based blind SQL injection and extract sensitive data from the database.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Ajax Load More 8.0 | earliest → < 8.0.1 | 8.0.1 |
Other CVEs of Ajax Load More
The 4 CVEs of Ajax Load More →
CVE-2026-6495
The Ajax Load More WordPress plugin before 7.8.4 does not sanitise and escape a parameter before outputting it back…
7.1
High
CVE-2015-10140
The Ajax Load More plugin before 2.8.1.2 does not have authorisation in some of its AJAX actions, allowing any…
8.8
High
CVE-2021-24140
Unvalidated input in the Ajax Load More WordPress plugin, versions before 5.3.2, lead to SQL Injection in POST…
Not rated