WordPress plugin
Ajax Load More – Infinite Scroll, Load More, & Lazy Load security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 19 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High5
- Medium13
- Low0
All Ajax Load More – Infinite Scroll, Load More, & Lazy Load vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.5 | Unauthenticated SQL Injection ≤8.0.0Update to 8.0.1 | CVE-2026-15360 | |
| High7.2 | Unauthenticated Stored Cross-Site Scripting <7.8.4Update to 7.8.4 | CVE-2026-6495 | |
| High7.5 | Cross-Site Request Forgery to PHAR Deserialization ≤5.5.3Update to 5.5.4 | CVE-2022-2433 | |
| High7.2 | SQL Injection <5.3.2Update to 5.3.2 | CVE-2021-24140 | |
| Critical9.8 | Local File Inclusion <2.11.2Update to 2.11.2 | — | |
| High8.8 | Arbitrary File Upload ≤2.8.1.1Update to 2.8.1.2 | CVE-2015-10140 |
- High7.5Unauthenticated SQL Injection
≤8.0.0Update to 8.0.1
- High7.2Unauthenticated Stored Cross-Site Scripting
<7.8.4Update to 7.8.4
- High7.5Cross-Site Request Forgery to PHAR Deserialization
≤5.5.3Update to 5.5.4
- High7.2SQL Injection
<5.3.2Update to 5.3.2
- Critical9.8Local File Inclusion
<2.11.2Update to 2.11.2
- High8.8Arbitrary File Upload
≤2.8.1.1Update to 2.8.1.2
Ajax Load More – Infinite Scroll, Load More, & Lazy Load: common questions
Does Ajax Load More – Infinite Scroll, Load More, & Lazy Load have known vulnerabilities?
Yes. VulnCrest Radar lists 19 known vulnerabilities in Ajax Load More – Infinite Scroll, Load More, & Lazy Load: 1 critical, 5 high, 13 medium. None are known to affect version null.
How do I check which version of Ajax Load More – Infinite Scroll, Load More, & Lazy Load I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Ajax Load More – Infinite Scroll, Load More, & Lazy Load vulnerability?
CVE-2026-15360, published Jul 29, 2026: Ajax Load More <= 8.0.0 - Unauthenticated SQL Injection. Severity: High (CVSS 7.5).
Is any Ajax Load More – Infinite Scroll, Load More, & Lazy Load vulnerability listed in CISA KEV?
No. None of the known Ajax Load More – Infinite Scroll, Load More, & Lazy Load vulnerabilities is currently listed in the CISA KEV catalog.