Ajax Load More – Infinite Scroll, Load More, & Lazy Load

WordPress plugin · ajax-load-more · WordPress.org ↗

Latest v8.0.1 Last release Jul 22, 2026 Tested up to WP 7.0.5 30,000+ active installs

Critical

High

Known total

Unfixed

Running Ajax Load More – Infinite Scroll, Load More, & Lazy Load on your site? WP Alerts checks your installed version against every entry below and emails you only when one affects you. Free, no tracking.

Scan a site Monitor my sites →

Severity	Vulnerability	Affected	Fixed in	CVE	Published
CRITICAL CVSS 9.1	Ajax Load More < 8.0.1 - Unauthenticated SQL Injection via custom_args CVE.org	>=0, <8.0.1	v8.0.1	CVE-2026-15360	Aug 5, 2026
HIGH CVSS 7.1	Ajax Load More < 7.8.4 - Reflected XSS CVE.org	>=0, <7.8.4	v7.8.4	CVE-2026-6495	May 18, 2026
HIGH CVSS 7.5	Ajax Load More – Infinite Scroll, Load More, & Lazy Load [ajax-load-more] < 5.5.4 WPVulnerability	< 5.5.4	v5.5.4	CVE-2022-2433	Aug 22, 2022
HIGH CVSS 7.2	Ajax Load More – Infinite Scroll, Load More, & Lazy Load [ajax-load-more] < 5.3.2 WPVulnerability	< 5.3.2	v5.3.2	CVE-2021-24140	May 18, 2020
HIGH CVSS 8.8	Ajax Load More – Infinite Scroll, Load More, & Lazy Load [ajax-load-more] < 2.8.1.2 WPVulnerability · PoC available	< 2.8.1.2	v2.8.1.2	CVE-2015-10140	Oct 10, 2015
MEDIUM CVSS 5.3	Ajax Load More – Infinite Scroll, Load More, & Lazy Load [ajax-load-more] < 7.8.2 WPVulnerability	< 7.8.2	v7.8.2	CVE-2025-15525	Jan 30, 2026
MEDIUM CVSS 5.3	Ajax Load More – Infinite Scroll, Load More, & Lazy Load [ajax-load-more] < 7.6.1 WPVulnerability	< 7.6.1	v7.6.1	CVE-2025-59582	Sep 22, 2025
MEDIUM CVSS 6.4	Ajax Load More – Infinite Scroll, Load More, & Lazy Load [ajax-load-more] < 7.4.1 WPVulnerability	< 7.4.1	v7.4.1	CVE-2025-4775	Jun 16, 2025
MEDIUM CVSS 5.4	Ajax Load More – Infinite Scroll, Load More, & Lazy Load [ajax-load-more] < 7.3.1.3 WPVulnerability	< 7.3.1.3	v7.3.1.3	CVE-2025-47630	May 7, 2025
MEDIUM CVSS 5.4	Ajax Load More – Infinite Scroll, Load More, & Lazy Load [ajax-load-more] < 7.1.3 WPVulnerability	< 7.1.3	v7.1.3	CVE-2024-8505	Oct 1, 2024
MEDIUM CVSS 5.4	Ajax Load More – Infinite Scroll, Load More, & Lazy Load [ajax-load-more] < 7.1.2 WPVulnerability	< 7.1.2	v7.1.2	CVE-2024-4711	May 31, 2024
MEDIUM CVSS 4.4	Ajax Load More – Infinite Scroll, Load More, & Lazy Load [ajax-load-more] < 7.0.2 WPVulnerability	< 7.0.2	v7.0.2	CVE-2026-15295	Mar 28, 2024
MEDIUM CVSS 4.9	Ajax Load More – Infinite Scroll, Load More, & Lazy Load [ajax-load-more] < 7.1.0 WPVulnerability	< 7.1.0	v7.1.0	CVE-2024-1790	Mar 26, 2024
MEDIUM CVSS 6.5	Ajax Load More – Infinite Scroll, Load More, & Lazy Load [ajax-load-more] < 6.2.0 WPVulnerability	< 6.2.0	v6.2.0	CVE-2023-50874	Dec 22, 2023
MEDIUM CVSS 5.4	Ajax Load More – Infinite Scroll, Load More, & Lazy Load [ajax-load-more] < 5.6.0.3 WPVulnerability · PoC available	< 5.6.0.3	v5.6.0.3	CVE-2022-4466	Feb 27, 2023
MEDIUM CVSS 4.9	Ajax Load More – Infinite Scroll, Load More, & Lazy Load [ajax-load-more] < 5.5.4 WPVulnerability · PoC available	< 5.5.4	v5.5.4	CVE-2022-2943	Aug 22, 2022
LOW CVSS 2.7	Ajax Load More – Infinite Scroll, Load More, & Lazy Load [ajax-load-more] < 5.5.4 WPVulnerability	< 5.5.4	v5.5.4	CVE-2022-2945	Aug 22, 2022
UNKNOWN	Ajax Load More – Infinite Scroll, Load More, & Lazy Load [ajax-load-more] < 8.0.1 WPVulnerability · PoC available	< 8.0.1	v8.0.1	CVE-2026-15360	Jul 29, 2026
UNKNOWN	Ajax Load More – Infinite Scroll, Load More, & Lazy Load [ajax-load-more] < 7.8.4 WPVulnerability · PoC available	< 7.8.4	v7.8.4	CVE-2026-6495	Jan 30, 2026
UNKNOWN	Ajax Load More – Infinite Scroll, Load More, & Lazy Load [ajax-load-more] < 5.5.4.1 WPVulnerability	< 5.5.4.1	v5.5.4.1	—	Aug 31, 2022
UNKNOWN	Ajax Load More – Infinite Scroll, Load More, & Lazy Load [ajax-load-more] < 5.3.2 WPVulnerability	< 5.3.2	v5.3.2	—	May 18, 2020
UNKNOWN	Ajax Load More – Infinite Scroll, Load More, & Lazy Load [ajax-load-more] < 2.11.2 WPVulnerability	< 2.11.2	v2.11.2	—	Aug 15, 2016
UNKNOWN	Ajax Load More – Infinite Scroll, Load More, & Lazy Load [ajax-load-more] < 2.11.2 WPVulnerability	< 2.11.2	v2.11.2	—	Aug 15, 2016
UNKNOWN	Ajax Load More – Infinite Scroll, Load More, & Lazy Load [ajax-load-more] < 2.8.1.2 WPVulnerability	< 2.8.1.2	v2.8.1.2	—	Nov 9, 2015
UNKNOWN	Ajax Load More – Infinite Scroll, Load More, & Lazy Load [ajax-load-more] < 2.8.2 WPVulnerability	< 2.8.2	v2.8.2	—	Oct 18, 2015
UNKNOWN	Ajax Load More – Infinite Scroll, Load More, & Lazy Load [ajax-load-more] < 5.5.4 WPVulnerability	< 5.5.4	v5.5.4	—	—
UNKNOWN	Ajax Load More – Infinite Scroll, Load More, & Lazy Load [ajax-load-more] < 2.8.1.2 WPVulnerability	< 2.8.1.2	v2.8.1.2	—	—
UNKNOWN	Ajax Load More – Infinite Scroll, Load More, & Lazy Load [ajax-load-more] < 7.0.2 WPVulnerability	< 7.0.2	v7.0.2	—	—
UNKNOWN	Ajax Load More – Infinite Scroll, Load More, & Lazy Load [ajax-load-more] < 2.11.2 WPVulnerability	< 2.11.2	v2.11.2	—	—

Data aggregated from WPVulnerability, NVD/NIST, ENISA EUVD, CVE.org and WordPress.org. Provided as-is; verify with the plugin author before acting. Disclaimer.