Unrated severityNVD Advisory· Published Jul 22, 2025· Updated Jan 9, 2026
Ajax Load More < 2.8.1.2 - Subscriber+ File Upload & Deletion
CVE-2015-10140
Description
The Ajax Load More plugin before 2.8.1.2 does not have authorisation in some of its AJAX actions, allowing any authenticated users, such as subscriber, to upload and delete arbitrary files.
Affected products
2- Ajax Load More plugin/Ajax Load More plugindescription
- Range: <2.8.1.2
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- wpscan.com/vulnerability/9f0c926e-0609-4c89-a724-88e16bcfa82amitreexploitvdb-entrytechnical-description
News mentions
0No linked articles in our index yet.