Ajax Load More Cache: Unauthenticated remote code execution
The Cache add-on for the WordPress plugin Ajax Load More, in versions 3.1.1 and earlier, contains an unauthenticated remote code execution flaw (CWE-94, code injection). An attacker on the internet can send crafted requests without a login and, according to the Patchstack classification, run arbitrary commands on the server. Exposure depends on whether the add-on is installed on an internet-facing WordPress site.
Connekthq · Ajax Load More Cache
