dcooney

Products

Product	CVEs	Exploited	Latest
Ajax Load More – Infinite Scroll, Load More, & Lazy Load	9	–	Jul 10, 2026

CVE-2026-15295 Medium 4.4 Ajax Load More <= 7.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting 0.2%
CVE-2025-15525 Medium 5.3 Ajax Load More – Infinite Scroll, Lazy Load & Load More <= 7.8.1 - Incorrect Authorization to Unauthenticated Private/Draft Post Title and Excerpt Exposure 0.3%
CVE-2025-4775 Medium 6.4 WordPress Infinite Scroll – Ajax Load More <= 7.4.0.1 - Authenticated(Contributor+) Stored Cross-Site Scripting 0.2%
CVE-2024-8505 Medium 6.4 WordPress Infinite Scroll - Ajax Load More <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via button_label Parameter 0.4%
CVE-2024-4711 Medium 6.4 WordPress Infinite Scroll – Ajax Load More <= 7.1.1 - Authenticated (Contributor+) Cross-Site Scripting 0.4%
CVE-2024-1790 Medium 4.9 Ajax Load More <= 7.0.1 - Authenticated (Admin+) Directory Traversal to Arbitrary File Read 0.8%
CVE-2022-2943 Medium 4.9 WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Authenticated (Admin+) Arbitrary File Read 1.7%
CVE-2022-2945 Medium 4.9 WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Directory Traversal 1.8%
CVE-2022-2433 High 7.5 WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Cross-Site Request Forgery to PHAR Deserialization 1.6%