Veille CVE

Recherche « Unknown Ajax Load More »

2 CVE

Critique 1 Élevée 1 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown Ajax Load More » ✕
  1. CVE-2026-15360 9.1 Critique

    Unknown Ajax Load More

    The Ajax Load More WordPress plugin before 8.0.1 does not properly sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated attackers to perform time-based blind SQL injection and extract sensitive data from the database.

  2. CVE-2026-6495 7.1 Élevée

    Unknown Ajax Load More

    The Ajax Load More WordPress plugin before 7.8.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin