CVE-2026-15360

The CVE concerns the WordPress plugin Ajax Load More before 8.0.1, where a parameter is not properly sanitised/escaped before use in a SQL query. This enables unauthenticated, time-based blind SQL injection via the custom_args path, allowing extraction of sensitive data from the database. Affecte...