Ajax Load More – Infinite Scroll, Load More, & Lazy Load — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in Ajax Load More – Infinite Scroll, Load More, & Lazy Load, with AI-generated Chinese analysis, references, and POCs.

Vendor: dcooney

CVE ID	Title	CVSS	Severity	Published
CVE-2026-15295	Ajax Load More <= 7.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting CWE-692	4.4	Medium	2026-07-10
CVE-2025-15525	Ajax Load More – Infinite Scroll, Lazy Load & Load More <= 7.8.1 - Incorrect Authorization to Unauthenticated Private/Draft Post Title and Excerpt Exposure CWE-863	5.3	Medium	2026-01-31
CVE-2025-4775	WordPress Infinite Scroll – Ajax Load More <= 7.4.0.1 - Authenticated(Contributor+) Stored Cross-Site Scripting CWE-79	6.4	Medium	2025-06-17
CVE-2024-8505	WordPress Infinite Scroll - Ajax Load More <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via button_label Parameter CWE-87	6.4	Medium	2024-10-02
CVE-2024-4711	WordPress Infinite Scroll – Ajax Load More <= 7.1.1 - Authenticated (Contributor+) Cross-Site Scripting CWE-79	6.4	Medium	2024-06-01
CVE-2024-1790	Ajax Load More <= 7.0.1 - Authenticated (Admin+) Directory Traversal to Arbitrary File Read CWE-22	4.9	Medium	2024-04-09
CVE-2022-2943	WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Authenticated (Admin+) Arbitrary File Read CWE-22	4.9	Medium	2022-09-06
CVE-2022-2945	WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Directory Traversal CWE-22	4.9	Medium	2022-09-06
CVE-2022-2433	WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Cross-Site Request Forgery to PHAR Deserialization CWE-502	7.5	High	2022-09-06

All 9 known CVE vulnerabilities affecting Ajax Load More – Infinite Scroll, Load More, & Lazy Load with full Chinese analysis, references, and POCs where available.