219 matches found
CVE-2025-47630
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Darren Cooney Ajax Load More ajax-load-more allows Stored XSS.This issue affects Ajax Load More: from n/a through = 7.3.1.2...
CVE-2025-47630
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Darren Cooney Ajax Load More allows Stored XSS. This issue affects Ajax Load More: from n/a through 7.3.1...
WordPress Ajax Load More plugin <= 7.3.1.2 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin Ajax Load More versions = 7.3.1.2...
CVE-2025-47630 WordPress Ajax Load More <= 7.3.1 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Darren Cooney Ajax Load More allows Stored XSS. This issue affects Ajax Load More: from n/a through 7.3.1...
CVE-2025-47630 WordPress Ajax Load More plugin <= 7.3.1.2 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Darren Cooney Ajax Load More ajax-load-more allows Stored XSS.This issue affects Ajax Load More: from n/a through = 7.3.1.2...
CVE-2025-47630
CVE-2025-47630 : Stored XSS in the WordPress Ajax Load More plugin caused by improper input neutralization during page generation. Affected: versions up to 7.3.1; fix released in 7.3.1.2 (PatchStack), with corroboration from NVD/CVE listings. Exploitation status not specified in the provided docu...
WordPress plugin Ajax Load More 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress Ajax Load More plugin, which stems from the application's lack of effective filtering and escaping of user-supplied...
PT-2025-20195 · Unknown · Ajax Load More
Name of the Vulnerable Software and Affected Versions: Ajax Load More versions through 7.3.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This enables an attacker to inject malicious...
CVE-2025-1771
The Traveler theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.1.8 via the 'hotelaloneloadmorepost' function 'style' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the...
CVE-2024-49662
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webgensis Simple Load More simple-load-more allows Reflected XSS.This issue affects Simple Load More: from n/a through = 1.0...
CVE-2024-53780
Cross-Site Request Forgery CSRF vulnerability in rajeevglocify Load More Posts load-more-posts allows Stored XSS.This issue affects Load More Posts: from n/a through = 1.5.0...
CVE-2024-53780
Cross-Site Request Forgery CSRF vulnerability in rajeevglocify Load More Posts load-more-posts allows Stored XSS.This issue affects Load More Posts: from n/a through = 1.5.0...
CVE-2024-53780
CVE-2024-53780 describes a Cross-Site Request Forgery that enables Stored XSS in the WordPress Load More Posts plugin, affecting versions up to 1.4.0 (per the CVE entry). The available connected sources corroborate the CSRF-to-Stored-XSS issue and indicate a later fix in version 1.5.0 or newer (P...
CVE-2024-53780 WordPress Load More Posts plugin <= 1.5.0 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in rajeevglocify Load More Posts load-more-posts allows Stored XSS.This issue affects Load More Posts: from n/a through = 1.5.0...
CVE-2024-53780 WordPress Load More Posts plugin <= 1.5.0 - CSRF to Stored XSS vulnerability
Cross-Site Request Forgery CSRF vulnerability in rajeevglocify Load More Posts load-more-posts allows Stored XSS.This issue affects Load More Posts: from n/a through = 1.5.0...
PT-2024-35893 · Unknown · Load More Posts
Name of the Vulnerable Software and Affected Versions: Load More Posts versions 1.4.0 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...
WordPress Load More Posts plugin <= 1.5.0 - CSRF to Stored XSS vulnerability
CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Load More Posts versions = 1.5.0...
CVE-2024-49662
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Webgensis Simple Load More allows Reflected XSS.This issue affects Simple Load More: from n/a through 1.0...
CVE-2024-49662
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webgensis Simple Load More simple-load-more allows Reflected XSS.This issue affects Simple Load More: from n/a through = 1.0...
CVE-2024-49662 WordPress Simple Load More plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webgensis Simple Load More simple-load-more allows Reflected XSS.This issue affects Simple Load More: from n/a through = 1.0...