WordPress plugin
Ajax Load More – Infinite Scroll, Load More, & Lazy Load security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 19 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High5
- Medium13
- Low0
All Ajax Load More – Infinite Scroll, Load More, & Lazy Load vulnerabilities
- High7.5Unauthenticated SQL Injection
≤8.0.0Update to 8.0.1
- High7.2Unauthenticated Stored Cross-Site Scripting
<7.8.4Update to 7.8.4
- Medium5.3Incorrect Authorization to Unauthenticated Private/Draft Post Title and Excerpt Exposure
≤7.8.1Update to 7.8.2
- Medium5.3Unauthenticated Sensitive Information Exposure
≤7.6.0.2Update to 7.6.1
- Medium6.4Authenticated(Contributor+) Stored Cross-Site Scripting
≤7.4.0.1Update to 7.4.1
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤7.3.1.2Update to 7.3.1.3
- Medium6.4Ajax Load More <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via button_label Parameter
≤7.1.2Update to 7.1.3
- Medium6.4Authenticated (Contributor+) Cross-Site Scripting
≤7.1.1Update to 7.1.2
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
≤7.0.1Update to 7.0.2
- Medium4.9Authenticated (Admin+) Directory Traversal to Arbitrary File Read
≤7.0.1Update to 7.1.0
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤6.1.0.1Update to 6.2
- Medium6.4Ajax Load More <= 5.6.0.2 - Authenticated (Contributor+) Stored Cross Site Scripting via Shortcode
≤5.6.0.2Update to 5.6.0.3
- Medium4.9Authenticated (Admin+) Arbitrary File Read via Directory Traversal
≤5.5.4Update to 5.5.4.1
- Medium4.9Directory Traversal
≤5.5.3Update to 5.5.4
- High7.5Cross-Site Request Forgery to PHAR Deserialization
≤5.5.3Update to 5.5.4
- Medium4.9Authenticated (Admin+) Arbitrary File Read
≤5.5.3Update to 5.5.4
- High7.2SQL Injection
<5.3.2Update to 5.3.2
- Critical9.8Local File Inclusion
<2.11.2Update to 2.11.2
- High8.8Arbitrary File Upload
≤2.8.1.1Update to 2.8.1.2
Ajax Load More – Infinite Scroll, Load More, & Lazy Load: common questions
Does Ajax Load More – Infinite Scroll, Load More, & Lazy Load have known vulnerabilities?
Yes. VulnCrest Radar lists 19 known vulnerabilities in Ajax Load More – Infinite Scroll, Load More, & Lazy Load: 1 critical, 5 high, 13 medium. None are known to affect version null.
How do I check which version of Ajax Load More – Infinite Scroll, Load More, & Lazy Load I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Ajax Load More – Infinite Scroll, Load More, & Lazy Load vulnerability?
CVE-2026-15360, published Jul 29, 2026: Ajax Load More <= 8.0.0 - Unauthenticated SQL Injection. Severity: High (CVSS 7.5).
Is any Ajax Load More – Infinite Scroll, Load More, & Lazy Load vulnerability listed in CISA KEV?
No. None of the known Ajax Load More – Infinite Scroll, Load More, & Lazy Load vulnerabilities is currently listed in the CISA KEV catalog.