WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ajax-bootmodal-login
Published
2018-08-26
Title
Ajax BootModal Login <= 1.4.3 - Captcha Reuse
Slug
ajax-category-dropdown
Published
2014-08-01
Title
Ajax Category Dropdown 0.1.5 - Multiple Vulnerabilities
Slug
ajax-comment-form-cst
Published
2025-04-24
Title
Ajax Comment Form CST <= 1.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
ajax-content-filter
Published
2024-11-04
Title
Ajax Content Filter <= 1.0 - Reflected Cross-Site Scripting
Slug
ajax-domain-checker
Published
2023-11-15
Title
Ajax Domain Checker <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ajax-extend
Published
2024-10-14
Title
ajax-extend <= 1.0 - Unauthenticated Remote Code Execution
Slug
ajax-filter-posts
Published
2024-05-03
Title
Post Grid Master < 3.4.8 - Missing Authorization
Slug
ajax-filter-posts
Published
2024-05-06
Title
Post Grid Master < 3.4.12 - Contributor+ Stored XSS
Slug
ajax-filter-posts
Published
2024-08-07
Title
Post Grid Master < 3.4.11 - Reflected Cross-Site Scripting
Slug
ajax-filter-posts
Published
2025-01-08
Title
Post Grid Master < 3.4.13 - Missing Authorization to Unauthenticated Local PHP File Inclusion
Slug
ajax-filter-posts
Published
2025-01-24
Title
Post Grid Master < 3.4.13 - Authenticated (Contributor+) Local File Inclusion
Slug
ajax-filter-posts
Published
2025-06-05
Title
Post Grid Master <= 3.4.14 - Missing Authorization
Slug
ajax-filter-posts
Published
2025-07-23
Title
Post Grid Master < 3.4.14 - Reflected Cross-Site Scripting via argsArray['read_more_text']
Slug
ajax-hits-counter
Published
2026-01-18
Title
AJAX Hits Counter + Popular Posts Widget <= 0.10.210305 - Missing Authorization
Slug
ajax-live-search
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
ajax-live-search
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
ajax-load-more
Published
2015-10-10
Title
Ajax Load More < 2.8.1.2 - Subscriber+ File Upload & Deletion
Slug
ajax-load-more
Published
2016-08-15
Title
Ajax Load More <= 2.11.1 - Local File Inclusion (LFI)
Slug
ajax-load-more
Published
2020-05-18
Title
Ajax Load More < 5.3.2 - Authenticated SQL Injection
Slug
ajax-load-more
Published
2022-08-22
Title
Ajax Load More < 5.5.4 - PHAR Deserialization via CSRF
Slug
ajax-load-more
Published
2022-08-22
Title
Ajax Load More < 5.5.4 - Admin+ Arbitrary File Read
Slug
ajax-load-more
Published
2022-08-24
Title
Ajax Load More < 5.5.4.1 - Admin+ Arbitrary File Read
Slug
ajax-load-more
Published
2023-02-16
Title
WordPress Infinite Scroll - Ajax Load More < 5.6.0.3 - Contributor+ Stored XSS
Slug
ajax-load-more
Published
2023-12-22
Title
WordPress Infinite Scroll - Ajax Load More < 6.2 - Contributor+ Stored XSS
Slug
ajax-load-more
Published
2024-03-26
Title
Ajax Load More < 7.1.0 - Authenticated (Admin+) Directory Traversal to Arbitrary File Read