9.1
Critique
CVE-2026-15360 The Ajax Load More WordPress plugin before 8.0.1 does not properly sanitise and escape a parameter before using it in a…
Description
The Ajax Load More WordPress plugin before 8.0.1 does not properly sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated attackers to perform time-based blind SQL injection and extract sensitive data from the database.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Ajax Load More 8.0 | premières → < 8.0.1 | 8.0.1 |
Autres CVE de Ajax Load More
Les 4 CVE de Ajax Load More →
CVE-2026-6495
The Ajax Load More WordPress plugin before 7.8.4 does not sanitise and escape a parameter before outputting it back…
7.1
Élevée
CVE-2015-10140
The Ajax Load More plugin before 2.8.1.2 does not have authorisation in some of its AJAX actions, allowing any…
8.8
Élevée
CVE-2021-24140
Unvalidated input in the Ajax Load More WordPress plugin, versions before 5.3.2, lead to SQL Injection in POST…
Non notée