8.8
Élevée
CVE-2015-10140 The Ajax Load More plugin before 2.8.1.2 does not have authorisation in some of its AJAX actions, allowing any…
Description
The Ajax Load More plugin before 2.8.1.2 does not have authorisation in some of its AJAX actions, allowing any authenticated users, such as subscriber, to upload and delete arbitrary files.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Ajax Load More 2.8 | premières → < 2.8.1.2 | 2.8.1.2 |
Autres CVE de Ajax Load More
Les 4 CVE de Ajax Load More →
CVE-2026-15360
The Ajax Load More WordPress plugin before 8.0.1 does not properly sanitise and escape a parameter before using it in a…
9.1
Critique
CVE-2026-6495
The Ajax Load More WordPress plugin before 7.8.4 does not sanitise and escape a parameter before outputting it back…
7.1
Élevée
CVE-2021-24140
Unvalidated input in the Ajax Load More WordPress plugin, versions before 5.3.2, lead to SQL Injection in POST…
Non notée