Vulnerability index

Browse CVEs

11 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Ajax Load More HIGH 8.8
CVE-2015-10140

The Ajax Load More plugin before 2.8.1.2 does not have authorisation in some of its AJAX actions, allowing any authenticated users, such as subscribe…

Fix: 2.8.1.2+
Fix from $1,950 2025-07-22
Ajax Load More MEDIUM 5.4
CVE-2025-47630

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Darren Cooney Ajax Load More ajax-load-more all…

Fix: after 7.3.1
Fix from $1,600 2025-05-07
Ajax Load More MEDIUM 5.4
CVE-2024-8505

The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘button_label’ parameter in …

Fix: 7.1.3+
Fix from $1,600 2024-10-02
Ajax Load More MEDIUM 5.4
CVE-2024-4711

The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ajax_load_more shortcode in …

Fix: 7.1.2+
Fix from $1,600 2024-06-01
Instant Images One Click Unsplash Uploads MEDIUM 6.5
CVE-2024-0869

The Instant Images – One Click Image Uploads from Unsplash, Openverse, Pixabay and Pexels plugin for WordPress is vulnerable to unauthorized arbitrar…

Fix: after 6.1.0
Fix from $1,600 2024-02-05
Ajax Load More MEDIUM 5.4
CVE-2023-50874

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Darren Cooney WordPress Infinite Scroll – Ajax …

Fix: after 6.1.0.1
Fix from $1,600 2023-12-28
Instant Images HIGH 8.8
CVE-2023-27451

Server-Side Request Forgery (SSRF) vulnerability in Darren Cooney Instant Images plugin <= 5.1.0.2 versions.

Fix: after 5.1.0.2
Fix from $1,950 2023-11-22
Ajax Load More MEDIUM 5.4
CVE-2022-4466

The WordPress Infinite Scroll WordPress plugin before 5.6.0.3 does not validate and escape some of its shortcode attributes before outputting them ba…

Fix: 5.6.0.3+
Fix from $1,600 2023-03-13
Ajax Load More HIGH 7.5
CVE-2022-2433

The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to deserialization of untrusted input via the 'alm_repeaters_export…

Fix: 5.5.4+
Fix from $1,950 2022-09-06
Instant Images One Click Unsplash Uploads MEDIUM 5.4
CVE-2021-24334

The Instant Images – One Click Unsplash Uploads WordPress plugin before 4.4.0.1 did not properly validate and sanitise its unsplash_download_w and un…

Fix: 4.4.0.1+
Fix from $1,600 2021-06-01
Ajax Load More HIGH 7.2
CVE-2021-24140

Unvalidated input in the Ajax Load More WordPress plugin, versions before 5.3.2, lead to SQL Injection in POST /wp-admin/admin-ajax.php with param re…

Fix: 5.3.2+
Fix from $1,950 2021-03-18