Advisories · Technology

Ajax Load More.

Every CVE that names Ajax Load More among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-15360 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Ajax Load More < 8.0.1 - Unauthenticated SQL Injection via custom_args
- Ajax Load More
- SQL injection
Not analysed yet 5 Aug 2026
CVE-2026-6495 CVE record

CVSS 7.1 High

Ajax Load More < 7.8.4 - Reflected XSS
- Ajax Load More
- Cross-site scripting (XSS)
Not analysed yet 18 May 2026
CVE-2015-10140 CVE record

CVSS 8.8 High

Ajax Load More < 2.8.1.2 - Subscriber+ File Upload & Deletion
- Ajax Load More
- Broken access control
Not analysed yet 22 Jul 2025
CVE-2021-24140 CVE record

Ajax Load More < 5.3.2 - Authenticated SQL Injection
- Ajax Load More
- SQL injection
Not analysed yet 18 Mar 2021