Browse CVEs

HIGH 8.8 CVE-2015-10140 The Ajax Load More plugin before 2.8.1.2 does not have authorisation in some of its AJAX actions, allowing any authenticated users, such as subscribe… Ajax Load More 2.8.1.2+ Fix from $1,9502025-07-22 MEDIUM 5.4 CVE-2025-47630 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Darren Cooney Ajax Load More ajax-load-more all… Ajax Load More after 7.3.1 Fix from $1,6002025-05-07 MEDIUM 5.4 CVE-2024-8505 The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘button_label’ parameter in … Ajax Load More 7.1.3+ Fix from $1,6002024-10-02 MEDIUM 5.4 CVE-2024-4711 The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ajax_load_more shortcode in … Ajax Load More 7.1.2+ Fix from $1,6002024-06-01 MEDIUM 6.5 CVE-2024-0869 The Instant Images – One Click Image Uploads from Unsplash, Openverse, Pixabay and Pexels plugin for WordPress is vulnerable to unauthorized arbitrar… Instant Images One Click Unsplash Uploads after 6.1.0 Fix from $1,6002024-02-05 MEDIUM 5.4 CVE-2023-50874 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Darren Cooney WordPress Infinite Scroll – Ajax … Ajax Load More after 6.1.0.1 Fix from $1,6002023-12-28 HIGH 8.8 CVE-2023-27451 Server-Side Request Forgery (SSRF) vulnerability in Darren Cooney Instant Images plugin <= 5.1.0.2 versions. Instant Images after 5.1.0.2 Fix from $1,9502023-11-22 MEDIUM 5.4 CVE-2022-4466 The WordPress Infinite Scroll WordPress plugin before 5.6.0.3 does not validate and escape some of its shortcode attributes before outputting them ba… Ajax Load More 5.6.0.3+ Fix from $1,6002023-03-13 HIGH 7.5 CVE-2022-2433 The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to deserialization of untrusted input via the 'alm_repeaters_export… Ajax Load More 5.5.4+ Fix from $1,9502022-09-06 MEDIUM 5.4 CVE-2021-24334 The Instant Images – One Click Unsplash Uploads WordPress plugin before 4.4.0.1 did not properly validate and sanitise its unsplash_download_w and un… Instant Images One Click Unsplash Uploads 4.4.0.1+ Fix from $1,6002021-06-01 HIGH 7.2 CVE-2021-24140 Unvalidated input in the Ajax Load More WordPress plugin, versions before 5.3.2, lead to SQL Injection in POST /wp-admin/admin-ajax.php with param re… Ajax Load More 5.3.2+ Fix from $1,9502021-03-18