Ajax Load More vulnerabilities
We track 2 vulnerabilities in Ajax Load More products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 5, 2026.
2vulnerabilities
1critical
1high
0exploited
8.1average CVSS score
Latest Ajax Load More vulnerabilities
- 9.1 Critical severity
Ajax Load More: Improper Neutralization of Special Elements used in an SQL Command
The Ajax Load More WordPress plugin before 8.0.1 does not properly sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated attackers to perform time-based blind SQL injection and extract sensitive data from the database.
- 7.1 High severity
Ajax Load More: Improper Neutralization of Input During Web Page Generation
The Ajax Load More WordPress plugin before 7.8.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin