CVE-2022-2943mediumCWE-22

CVE-2022-2943: fallo de gravedad media en dcooney Ajax Load More – Infinite Scroll, Load…

WordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Authenticated (Admin+) Arbitrary File Read

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Ajax Load More – Infinite Scroll, Load More, & Lazy Load

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 4.9epss 1.7%
The WordPress Infinite Scroll – Ajax Load More plugin for Wordpress is vulnerable to arbitrary file reading in versions up to, and including, 5.5.3 due to insufficient file path validation on the alm_repeaters_export() function. This makes it possible for authenticated attackers, with administrative privileges, to download arbitrary files hosted on the server that may contain sensitive content, such as the wp-config.php file.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Productos afectados
dcooney · Ajax Load More – Infinite Scroll, Load More, & Lazy Load
CVEs relacionadas — dcooney Ajax Load More – Infinite Scroll, Load…

En el mismo producto, de las más peligrosas a las menos.

CVE-2022-2945MEDIUMWordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Directory TraversalEPSS 1.8%CVE-2022-2433HIGHWordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Cross-Site Request Forgery to PHAR DeserializationEPSS 1.6%CVE-2024-1790MEDIUMAjax Load More <= 7.0.1 - Authenticated (Admin+) Directory Traversal to Arbitrary File ReadEPSS 0.8%CVE-2024-4711MEDIUMWordPress Infinite Scroll – Ajax Load More <= 7.1.1 - Authenticated (Contributor+) Cross-Site ScriptingEPSS 0.4%CVE-2024-8505MEDIUMWordPress Infinite Scroll - Ajax Load More <= 7.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via button_label ParameterEPSS 0.4%CVE-2025-15525MEDIUMAjax Load More – Infinite Scroll, Lazy Load & Load More <= 7.8.1 - Incorrect Authorization to Unauthenticated Private/Draft Post Title and Excerpt ExposureEPSS 0.3%