Lucene search
+L

6 matches found

CVE
CVE
•added 2026/08/05 6:00 a.m.•104 views

CVE-2026-15360

The Ajax Load More WordPress plugin (versions before 8.0.1 ) is vulnerable to unauthenticated time-based blind SQL injection . The root cause is the improper sanitization and escaping of the custom_args parameter before it is used in a SQL query. An unauthenticated attacker can exploit this flaw ...

9.1CVSS5.9AI score0.00457EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/02/01 9:18 a.m.•39 views

CVE-2025-15525

The Ajax Load More – Infinite Scroll, Load More, & Lazy Load plugin for WordPress is vulnerable to unauthorized access of data due to incorrect authorization on the parsecustomargs function in all versions up to, and including, 7.8.1. This makes it possible for unauthenticated attackers to expose...

5.3CVSS5.9AI score0.00297EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/31 4:35 a.m.•49 views

CVE-2025-15525

CVE-2025-15525 affects the WordPress plugin “Ajax Load More – Infinite Scroll, Load More, & Lazy Load.” The vulnerability arises from incorrect authorization in the parse_custom_args() function, allowing unauthenticated users to view titles and excerpts of private, draft, pending, scheduled, and ...

5.3CVSS5.8AI score0.00297EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/01/31 4:35 a.m.•22 views

EUVD-2025-206596

The Ajax Load More – Infinite Scroll, Load More, & Lazy Load plugin for WordPress is vulnerable to unauthorized access of data due to incorrect authorization on the parsecustomargs function in all versions up to, and including, 7.8.1. This makes it possible for unauthenticated attackers to expose...

5.3CVSS5.9AI score0.00297EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/01/31 4:35 a.m.•59 views

CVE-2025-15525 Ajax Load More – Infinite Scroll, Lazy Load & Load More <= 7.8.1 - Incorrect Authorization to Unauthenticated Private/Draft Post Title and Excerpt Exposure

The Ajax Load More – Infinite Scroll, Load More, & Lazy Load plugin for WordPress is vulnerable to unauthorized access of data due to incorrect authorization on the parsecustomargs function in all versions up to, and including, 7.8.1. This makes it possible for unauthenticated attackers to expose...

5.3CVSS0.00297EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/01/31 12:00 a.m.•36 views

PT-2026-5501

The Ajax Load More – Infinite Scroll, Load More, & Lazy Load plugin for WordPress is vulnerable to unauthorized access of data due to incorrect authorization on the parse custom args function in all versions up to, and including, 7.8.1. This makes it possible for unauthenticated attackers to expo...

5.3CVSS5.9AI score0.00297EPSS
SaveExploits0References3
Rows per page
Query Builder