Non notée
CVE-2021-24140 Unvalidated input in the Ajax Load More WordPress plugin, versions before 5.3.2, lead to SQL Injection in POST…
Description
Unvalidated input in the Ajax Load More WordPress plugin, versions before 5.3.2, lead to SQL Injection in POST /wp-admin/admin-ajax.php with param repeater=' or sleep(5)#&type=test.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Ajax Load More 5.3 | premières → < 5.3.2 | 5.3.2 |
Autres CVE de Ajax Load More
Les 4 CVE de Ajax Load More →
CVE-2026-15360
The Ajax Load More WordPress plugin before 8.0.1 does not properly sanitise and escape a parameter before using it in a…
9.1
Critique
CVE-2026-6495
The Ajax Load More WordPress plugin before 7.8.4 does not sanitise and escape a parameter before outputting it back…
7.1
Élevée
CVE-2015-10140
The Ajax Load More plugin before 2.8.1.2 does not have authorisation in some of its AJAX actions, allowing any…
8.8
Élevée