Skip to content
OpenAdvisories

Vendor

paulirish-1

1 known vulnerabilities.

Products

Infinite-Scroll 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2024-10040

    Infinite-Scroll <= 2.6.2 - Cross-Site Request Forgery to Plugin Settings Update

    The Infinite-Scroll plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.6.2. This is due to missing or incorrect nonce validation on the process_ajax_edit and process_ajax_delete function. This makes it pos…

    paulirish-1 Infinite-Scroll Web / CMS