Ajax Load More < 7.6.1 - Unauthenticated Sensitive Information Exposure
The Ajax Load More - Infinite Scroll plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.6.0.2. The plugin's AJAX endpoint (wp_ajax_nopriv_alm_get_posts) allows unauthenticated users to access non-public posts (draft, private, pending, future, trash) by injecting post_status via the custom_args parameter, which bypasses the post_status authorization check in class-alm-queryargs.php. References: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/ajax-load-more/ajax-load-more-7602-unauthenticated-sensitive-information-exposure Remediation: Update to the latest version beyond 7.6.0.2
Used 20 times · 10 assets checked · domain, subdomain, ipv4