Plugin icon

Ajax Load More – Infinite Scroll, Load More, & Lazy Load

ajax-load-more

Vulnerabilities:

16

Last Updated:

February 19, 2026

Active Installs:

40000

Published
Title
Fixed in
CVSS
Published
2026-01-30
Title
Ajax Load More – Infinite Scroll, Lazy Load & Load More < 7.8.2 - Incorrect Authorization to Unauthenticated Private/Draft Post Title and Excerpt Exposure
Fixed in
Fixed in 7.8.2
CVSS
5.3 (medium)
Published
2025-09-22
Title
Ajax Load More < 7.6.1 - Unauthenticated Sensitive Information Exposure
Fixed in
Fixed in 7.6.1
CVSS
5.3 (medium)
Published
2025-06-16
Title
WordPress Infinite Scroll – Ajax Load More < 7.4.1 - Authenticated(Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 7.4.1
CVSS
6.4 (medium)
Published
2025-05-07
Title
Ajax Load More < 7.3.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 7.3.1.3
CVSS
6.4 (medium)
Published
2024-10-01
Title
WordPress Infinite Scroll - Ajax Load More < 7.1.3 - Contributor+ Stored XSS
Fixed in
Fixed in 7.1.3
CVSS
5.9 (medium)
Published
2024-05-31
Title
WordPress Infinite Scroll – Ajax Load More < 7.1.2 - Authenticated (Contributor+) Cross-Site Scripting
Fixed in
Fixed in 7.1.2
CVSS
6.4 (medium)
Published
2024-03-28
Title
Ajax Load More < 7.0.2 - Administrator+ Stored Cross-Site Scripting
Fixed in
Fixed in 7.0.2
CVSS
4.4 (medium)
Published
2024-03-26
Title
Ajax Load More < 7.1.0 - Authenticated (Admin+) Directory Traversal to Arbitrary File Read
Fixed in
Fixed in 7.1.0
CVSS
4.9 (medium)
Published
2023-12-22
Title
WordPress Infinite Scroll - Ajax Load More < 6.2 - Contributor+ Stored XSS
Fixed in
Fixed in 6.2
CVSS
6.4 (medium)
Published
2023-02-16
Title
WordPress Infinite Scroll - Ajax Load More < 5.6.0.3 - Contributor+ Stored XSS
Fixed in
Fixed in 5.6.0.3
CVSS
6.8 (medium)
Published
2022-08-24
Title
Ajax Load More < 5.5.4.1 - Admin+ Arbitrary File Read
Fixed in
Fixed in 5.5.4.1
CVSS
4.9 (medium)
Published
2022-08-22
Title
Ajax Load More < 5.5.4 - PHAR Deserialization via CSRF
Fixed in
Fixed in 5.5.4
CVSS
7.5 (high)
Published
2022-08-22
Title
Ajax Load More < 5.5.4 - Admin+ Arbitrary File Read
Fixed in
Fixed in 5.5.4
CVSS
4.9 (medium)
Published
2020-05-18
Title
Ajax Load More < 5.3.2 - Authenticated SQL Injection
Fixed in
Fixed in 5.3.2
CVSS
9.0 (critical)
Published
2016-08-15
Title
Ajax Load More <= 2.11.1 - Local File Inclusion (LFI)
Fixed in
Fixed in 2.11.2
CVSS
n/a
Published
2015-10-10
Title
Ajax Load More < 2.8.1.2 - Subscriber+ File Upload & Deletion
Fixed in
Fixed in 2.8.1.2
CVSS
8.8 (high)