Ajax Load More – Infinite Scroll, Load More, & Lazy Load

Vulnerabilities 26Slug ajax-load-moreLatest version 7.8.4WordPress.org →

Minimum safe version

7.8.2

Update to 7.8.2 or later to address 26 fixable vulnerabilities

Latest available7.8.4 ✓
Medium 5.3
2025-09-22< 7.6.1

Ajax Load More <= 7.6.0.2 - Unauthenticated Sensitive Information Exposure

WordfenceEUVDCVE
High 8.8
2025-07-22< 2.8.1.2

CVE-2015-10140

CVEEUVD
Medium 6.4
2025-06-16< 7.4.1

WordPress Infinite Scroll – Ajax Load More <= 7.4.0.1 - Authenticated(Contributor+) Stored Cross-Site Scripting

WordfenceCVE
Medium 5.4
2024-06-03< 7.1.2

WordPress Ajax Load More Plugin <= 7.1.1 is vulnerable to Cross Site Scripting (XSS)

PatchstackCVEWordfence
N/A
< 7.0.2

WordPress Ajax Load More Plugin <= 7.0.1 is vulnerable to Cross Site Scripting (XSS)

Patchstack
N/A
2024-03-28< 7.0.2

Ajax Load More <= 7.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting

Wordfence
Medium 6.5
2024-12-22< 6.2.0

WordPress Ajax Load More Plugin <= 6.1.0.1 is vulnerable to Cross Site Scripting (XSS)

PatchstackCVEWordfenceWPScan
N/A
< 5.5.4

Ajax Load More &lt; 5.5.4.1 - Admin+ Arbitrary File Read

WPScan
Medium 5.4
2023-03-14< 5.6.0.3

WordPress Ajax Load More Plugin < 5.6.0.3 is vulnerable to Cross Site Scripting (XSS)

PatchstackCVEWordfenceWPScan
N/A
2015-10-10< 2.8.1.2

WordPress Infinite Scroll – Ajax Load More <= 2.8.1.1 - Arbitrary File Upload

Wordfence
N/A
2016-08-15< 2.11.2

Ajax Load More < 2.11.2 - Local File Inclusion

Wordfence
N/A
2022-08-31< 5.5.4.1

Infinite Scroll – Ajax Load More <= 5.5.4 - Authenticated (Admin+) Arbitrary File Read via Directory Traversal

Wordfence
N/A
< 2.8.1.2

Ajax Load More &lt;= 2.8.1.1 - Authenticated File Upload &amp; Deletion

WPScan
N/A
< 2.11.2

Ajax Load More &lt;= 2.11.1 - Local File Inclusion (LFI)

WPScan
N/A
2015-10-18< 2.8.2

WordPress Ajax Load More Plugin < 2.8.2 - File Upload

Patchstack
N/A
2015-11-09< 2.8.1.2

WordPress Ajax Load More Plugin 2.8.1.1 - PHP Upload

Patchstack
N/A
2016-08-15< 2.11.2

WordPress Ajax Load More Plugin <= 2.11.1 - Local File Inclusion

Patchstack
N/A
2020-05-18< 5.3.2

WordPress Ajax Load More plugin <= 5.3.1 - Authenticated SQL Injection (SQLi) vulnerability

Patchstack