| Package | Affected versions | Patched versions |
|---|---|---|
| ajax load more | < 5.3.2 | 5.3.2 |
Unvalidated input in the Ajax Load More WordPress plugin, versions before 5.3.2, lead to SQL Injection in POST /wp-admin/admin-ajax.php with param repeater=' or sleep(5)#&type=test.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free