https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2015-10140.htmlhttps://patchthecve.com/cve/CVE-2015-10140.htmlWed, 17 Jun 2026 00:21:35 +0000HIGH 8.8: The Ajax Load More plugin before 2.8.1.2 does not have authorisation in some of its AJAX actions, allowing any authenticated users, such as subscriber, to upload and delete arbitrary files.https://patchthecve.com/cve/CVE-2025-47630.htmlhttps://patchthecve.com/cve/CVE-2025-47630.htmlWed, 17 Jun 2026 09:28:26 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Darren Cooney Ajax Load More ajax-load-more allows Stored XSS.This issue affects Ajax Load More: from n/a through <= 7.3.1.2.https://patchthecve.com/cve/CVE-2024-4711.htmlhttps://patchthecve.com/cve/CVE-2024-4711.htmlWed, 17 Jun 2026 08:02:27 +0000MEDIUM 6.4: The WordPress Infinite Scroll – Ajax Load More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ajax_load_more shortcode in versions up to, and including, 7.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wihttps://patchthecve.com/cve/CVE-2023-50874.htmlhttps://patchthecve.com/cve/CVE-2023-50874.htmlWed, 17 Jun 2026 06:40:08 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Darren Cooney WordPress Infinite Scroll – Ajax Load More allows Stored XSS.This issue affects WordPress Infinite Scroll – Ajax Load More: from n/a through 6.1.0.1.