7.1
Élevée
CVE-2026-6495 The Ajax Load More WordPress plugin before 7.8.4 does not sanitise and escape a parameter before outputting it back…
Description
The Ajax Load More WordPress plugin before 7.8.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Ajax Load More 7.8 | premières → < 7.8.4 | 7.8.4 |
Autres CVE de Ajax Load More
Les 4 CVE de Ajax Load More →
CVE-2026-15360
The Ajax Load More WordPress plugin before 8.0.1 does not properly sanitise and escape a parameter before using it in a…
9.1
Critique
CVE-2015-10140
The Ajax Load More plugin before 2.8.1.2 does not have authorisation in some of its AJAX actions, allowing any…
8.8
Élevée
CVE-2021-24140
Unvalidated input in the Ajax Load More WordPress plugin, versions before 5.3.2, lead to SQL Injection in POST…
Non notée