dcooney

8 results · Clear filters · Feed

• Medium 4.4
  CVE-2026-15295

  Ajax Load More <= 7.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting

  The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 7.0.1 due to insufficient input sanitization and output escaping. This makes it possible …

  dcooney Ajax Load More – Infinite Scroll, Load More, & Lazy Load Web / CMS
  Jul 10, 2026
• Medium 5.3
  CVE-2025-15525

  Ajax Load More – Infinite Scroll, Lazy Load & Load More <= 7.8.1 - Incorrect Authorization to Unauthenticated Private/Draft Post Title and Excerpt Exposure

  The Ajax Load More – Infinite Scroll, Load More, & Lazy Load plugin for WordPress is vulnerable to unauthorized access of data due to incorrect authorization on the parse_custom_args() function in all versions up to, and including, 7.8.1. This makes it possib…

  dcooney Ajax Load More – Infinite Scroll, Load More, & Lazy Load Web / CMS
  Jan 31, 2026
• Medium 6.4
  CVE-2025-4775

  WordPress Infinite Scroll – Ajax Load More <= 7.4.0.1 - Authenticated(Contributor+) Stored Cross-Site Scripting

  The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the data-button-label HTML attribute in all versions up to, and including, 7.4.0.1 due to insufficient input sanitization and output escaping.…

  dcooney Ajax Load More – Infinite Scroll, Load More, & Lazy Load Web / CMS
  Jun 17, 2025
• Medium 6.4
  CVE-2024-8505

  WordPress Infinite Scroll - Ajax Load More <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via button_label Parameter

  The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘button_label’ parameter in all versions up to, and including, 7.1.2 due to insufficient input sanitization and output escaping. This make…

  dcooney Ajax Load More – Infinite Scroll, Load More, & Lazy Load Web / CMS
  Oct 2, 2024
• Medium 6.4
  CVE-2024-4711

  WordPress Infinite Scroll – Ajax Load More <= 7.1.1 - Authenticated (Contributor+) Cross-Site Scripting

  The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ajax_load_more shortcode in versions up to, and including, 7.1.1 due to insufficient input sanitization and output escaping. This makes it…

  dcooney Ajax Load More – Infinite Scroll, Load More, & Lazy Load Web / CMS
  Jun 1, 2024
• Medium 4.9
  CVE-2024-1790

  Ajax Load More <= 7.0.1 - Authenticated (Admin+) Directory Traversal to Arbitrary File Read

  The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 7.0.1 via the 'type' parameter. This makes it possible for authenticated attackers, with administrator-level access and a…

  dcooney Ajax Load More – Infinite Scroll, Load More, & Lazy Load Web / CMS
  Apr 9, 2024
• Medium 4.9
  CVE-2022-2943

  WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Authenticated (Admin+) Arbitrary File Read

  The WordPress Infinite Scroll – Ajax Load More plugin for Wordpress is vulnerable to arbitrary file reading in versions up to, and including, 5.5.3 due to insufficient file path validation on the alm_repeaters_export() function. This makes it possible for aut…

  dcooney Ajax Load More – Infinite Scroll, Load More, & Lazy Load Web / CMS
  Sep 6, 2022
• Medium 4.9
  CVE-2022-2945

  WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Directory Traversal

  The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 5.5.3 via the 'type' parameter found in the alm_get_layout() function. This makes it possible for authenticated attacker…

  dcooney Ajax Load More – Infinite Scroll, Load More, & Lazy Load Web / CMS
  Sep 6, 2022