CVE-2026-15360

CVE-2026-15360 affects the Ajax Load More WordPress plugin prior to 8.0.1. The root cause is improper sanitization/escaping of a parameter used in a SQL query, enabling unauthenticated, time-based blind SQL injection to extract data. Affected component: parameter handling in the plugin’s SQL cons...